Zero-Click Agentic Browser Attack Can Delete Entire Google Drive Using Crafted Emails

A zero-click agentic browser attack can delete entire Google Drive contents by exploiting how AI assistants interpret natural language instructions in crafted emails. Another attack, HashJack, uses URL fragments to trick AI browsers into executing hidden malicious prompts.