Since 1995, every browser has followed a rule called the same origin policy , which prevents websites from reading each other’s data. If you have your bank open in one tab and visit a sketchy site in another, that sketchy site cannot touch your banking information. AI browsers need to bypass this rule to function, since completing tasks across multiple tabs requires reading across different sites. That broader access is exactly what attackers can exploit through two methods. The first is...
