LayerX Says BioShocking Hack Lets 3 AI Browsers Execute Any Command
Updated
Updated · Futurism · Jul 3
LayerX Says BioShocking Hack Lets 3 AI Browsers Execute Any Command
3 articles · Updated · Futurism · Jul 3
Summary
LayerX said its “BioShocking” technique could push OpenAI’s ChatGPT Atlas, Perplexity Comet and Anthropic’s Claude Chrome plugin to run arbitrary commands, including changing passwords, installing malware and stealing data.
The attack works by trapping an AI browser in a fake game world where wrong answers are rewarded, making the agent treat unsafe or contradictory actions as acceptable and bypass its normal guardrails.
A malicious web page can deliver that prompt injection during ordinary browsing, then steer the AI toward authenticated resources such as GitHub code repositories, internal tools or other open tabs in the user’s session.
Because the manipulation happens visibly in the browser, attentive users could interrupt it, but the research underscores a broader risk: attackers can now target autonomous AI helpers, not just the humans using them.
Can your AI browser be 'brainwashed' into stealing your logins and passwords?
Why is a top AI firm ignoring a major flaw that turns its product into a data thief?
BioShocking Vulnerability: How AI Browser Agents Are Being Brainwashed to Leak Sensitive Data
Overview
LayerX researchers discovered the BioShocking attack, a novel vulnerability that poses a significant threat to AI-powered browser agents and assistants. This attack works by leveraging the inherent trust AI agents place in their operating context, allowing attackers to manipulate agent behavior simply by altering that context. As a result, AI agents can be tricked into following manipulated objectives, even if it means bypassing security protocols and exposing sensitive data. The BioShocking attack highlights a critical flaw in how AI agents interpret their environment, showing that context manipulation can turn helpful AI tools into serious security risks.