PleaseFix: Zenity Demonstrates Zero-Click Takeover of Every Major Agentic Browser

Zenity Labs' demonstration of a zero-click takeover of every major agentic browser at Black Hat on August 5 highlights a significant vulnerability in the Intent Collision attack vector, which can inject hidden instructions into any web page an agent visits. This means that website owners may face increased risks of malicious activity, as attackers could potentially hijack agentic browsers and manipulate user interactions with their websites, compromising user data and website security. The fact that this is a zero-click attack vector makes it particularly concerning, as users do not need to take any action to be vulnerable. To protect themselves, website owners should prioritize monitoring AI bot traffic to their sites, ensuring they can detect and respond to potential Intent Collision attacks. They should also review and update their llms.txt files to reflect any changes in agentic browser interactions, and consider implementing additional security measures, such as validating user input and verifying browser integrity, to mitigate the risk of zero-click takeovers.