Research · curated 15 Aug 2026
Black Hat 2026: A Browser Bug Alone Is Harmless. Hand It to an AI Agent, and It Isn’t.
First reported medium.com
Coverage timeline
Single-source research — first reported, latest, and curated coincide.
Why it matters
The research invalidates the long-standing 'requires user interaction' triage assumption, because AI browsing agents will reliably and compliantly trigger exact interaction sequences that real humans rarely would, upgrading dormant low-severity browser bugs into exploitable chains.
A Medium write-up covers research presented by Gareth Heyes at Black Hat USA 2026 showing that previously low-severity browser bugs — dismissed because they required improbable, precise user interaction — become dangerous account-takeover chains when an AI browsing agent, rather than a human, is the one interacting with the page. The proof-of-concept work covers multiple real chains, several already reported to and partially fixed by affected companies.