An 'automated attacker' mimics the actions of human hackers to test the browser's defenses against prompt injection attacks. But there's a catch.

You can do a lot with Android Auto, but what you can't do is install a web browser—at least not with the default, out-of-the-box configuration. It is actually possible to get a window on to the web ...

OpenAI says prompt injections remain a key risk for AI browsers and is using an AI attacker to train ChatGPT Atlas.