Hidden API in Comet AI browser exposes users to device takeovers

SquareX researchers have identified a hidden API in the Comet AI browser that could allow browser extensions to execute local commands and take full control of users’ devices. This discovery highlights new security concerns for users of…