Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Obscure MCP API in Comet Browser Breaches User Trust, Enabling Full Device Control via AI Browsers

SquareX released critical research exposing a hidden API in Comet that allows extensions in the AI Browser to execute local commands and gain full control over users' devices. The research reveals that Comet has implemented a MCP API (chrome.perplexity.mcp.addStdioServer) that allows its embedded extensions to execute arbitrary local commands on users' devices, capabilities that traditional browsers explicitly prohibit. Concerningly, there is limited official documentation on the MCP API.

SecurityMetrics Wins "Data Leak Detection Solution of the Year" in 2025 CyberSecurity Breakthrough Awards Program

SecurityMetrics, a leading innovator in compliance and cybersecurity, today announced that its Shopping Cart Inspect (SCI) solutions has been selected as winner of the "Data Leak Detection Solution of the Year" award in the 9th annual CyberSecurity Breakthrough Awards program. Conducted by CyberSecurity Breakthrough, an independent market intelligence organization, the annual program recognizes the most innovative companies, products, and technologies driving progress in the global information security industry.

Egnyte Honors 2025 Spark Award Winners for Innovation and Partnership

Egnyte announces the five winners of its 2025 Spark Awards at its Global Summit in San Francisco this week. The Spark Awards recognize customers and partners who have transformed their business with Egnyte solutions, collaborated to improve Egnyte's products, or performed acts of advocacy.