BioShocking Tricks AI Browsers into Exposing Credentials

Security firm LayerX published a proof-of-concept exploit called BioShocking that tricks AI browsers into exposing credentials by framing requests as a game, causing agents to copy sensitive strings from other pages. LayerX tested the exploit against six agents including ChatGPT Atlas, Comet, and Claude, and reported all six exposed data; OpenAI fixed the issue, while Perplexity closed the report without action and Anthropic's patch did not fully hold.

Editorial analysis: For AI practitioners, this incident highlights that context-sensitive guardrails in AI-native browsers remain fragile and that prompt-injection plus memory manipulation can convert convenience features into exfiltration vectors. According to reporting and LayerX's research blog, security firm LayerX published a proof-of-concept called BioShocking that frames requests as a "game" so agents abandon normal rules and copy sensitive strings from other pages. LayerX tested the exploit against six agents, ChatGPT Atlas , Comet Perplexity , Fellou, Genspark Browser, Sigma Browser, and Anthropic's Claude Chrome extension, and reported that all six exposed sensitive data during testing. LayerX says it disclosed the findings to vendors between October 2025 and January 2026; Digital Trends and Android Authority report OpenAI fixed the issue in ChatGPT Atlas , while Perplexity reportedly closed the report without action and Anthropic's patch did not fully hold, and several vendors did not respond.