⚠️ Instructions hidden in a website's HTML can trick an AI browser into giving up your sensitive information. Today, we're revealing details on a prompt injection flaw we found in Opera Neon: https://lnkd.in/ezziDvxU How this attack works: 1) Attacker embeds instructions in hidden HTML elements or other non-rendered markup. 2) The user asks Opera Neon's AI a question. The AI extracts and processes the entire HTML structure including the instructions. 3) The browser obeys the instructions. In our demo attack in the video below, embedded instructions force Opera Neon to find and share the user’s email address. This same approach could be used to steal more sensitive info. For example, you could find a Neon user's credit card details if they're signed into that card's account. Last week we reported similar prompt injection flaws we discovered in AI browsers Perplexity Comet and Fellou: https://lnkd.in/efBxHjkd In each case, we disclosed vulnerabilities to affected browser vendors before publishing our findings so that they could fix these issues. Indirect prompt injection is a serious unsolved security problem facing all AI browsers that can act on the user's behalf. We're proud to have raised awareness of the issue through our research. But more must be done to secure AI browsing.
Brave
Technology, Information and Internet
San Francisco, California 55,464 followers
Block annoying ads, protect your privacy, and save time online with Brave. Switch in just 60 seconds.
About us
Brave is on a mission to build a user-first Web. Starting with our flagship browser and search engine, Brave shields users from the creepy ads and trackers that follow you across the web. Our browser has more than 100 million users and our search engine delivers over 1.6 billion queries per month. But we’re also changing the Web’s money model with a privacy-first digital ads platform that gives advertisers access to unreachable audiences; users earn crypto rewards for their attention; and creators unlock new revenue streams. Founded in 2015 by Brendan Eich, creator of JavaScript and co-founder of Mozilla (Firefox), and Brian Bondy, formerly of Khan Academy and Mozilla. Discover our products: Brave Browser: Fast, private browsing that blocks third-party ads and trackers by default. Brave Search: The world’s largest private search index, and the fastest growing independent search engine since Bing. Brave Ads: Unique cookie-less advertising in discreet ad units built right into the browser and search engine. Want to help build a better Web? Consider working with us!
- Website
-
https://www.brave.com
External link for Brave
- Industry
- Technology, Information and Internet
- Company size
- 51-200 employees
- Headquarters
- San Francisco, California
- Type
- Privately Held
- Founded
- 2015
Locations
-
Primary
Get directions
580 Howard St.
Unit 402
San Francisco, California 94105, US
Employees at Brave
Updates
-
A new #TheBraveTechnologist episode just dropped! 🎉 This week, Claynosaurz CEO Andrew Pelekis discusses the importance of fan engagement and audience participation in the success of digital brands. Some other key topics in this episode - What the company has learned from prior cycles about bringing blockchain projects to mainstream communities - How audience participation has changed, and what new revenue streams have become possible - The challenge of protecting original IP and the new fan intelligence system Claynosaurz is building 🎧 Listen to the full episode, hosted by Luke Mulks, here: https://lnkd.in/eNtz89pf
-
-
Brave and academic peers have developed SURE, a system that lets users privately report issues with AI models. The system then repairs these models while protecting the confidentiality of the model, data, and the repairing knowledge. Their paper was accepted by the 39th Annual Conference on Neural Information Processing Systems, a top-tier conference for ML and AI. It will be presented by Brave senior researcher Ali Shahin Shamsabadi at Hilton Mexico City Reforma on December 5.
Pin the Tail on the Model: Blindfolded Repair of User-Flagged Failures in Text-to-Image Services Have you ever wondered how we can repair AI models based on user feedback, without compromising confidentiality and intellectual property? We introduce SURE — the first end-to-end framework that SecUrely REpairs failures flagged by users of diffusion-based services. [Accepted at #NeurIPS2025] With SURE, service providers can collaborate securely with an external Model Repair Institute — leveraging their specialized expertise without revealing: - User feedback (privacy) - Service provider’s proprietary model - Institute’s proprietary repair algorithms Why this matters: - Users play a key role in identifying failures. - Service providers often lack the expertise or resources to fix them. - Model Repair Institutes want to protect their repair knowledge. SURE bridges these gaps — initiating the study of secure model repair, protecting the model, data, and repairing knowledge. Our approach co-designs a crypto-friendly editing algorithm with a customized 2PC protocol, enabling privacy-preserving collaboration for model repair. SURE is highly practical: SURE securely and effectively repairs all 32 layers of Stable Diffusion v1.4 in under 17 seconds. Authors: Gefei Tan Ali Shahin Shamsabadi Ellen Kolesnikova Hamed Haddadi Xiao Wang from Brave + Northwestern University + Imperial College London Paper: https://lnkd.in/dWfv_DmB
-
-
Brave reposted this
The newly launched multiplayer game ARC Raiders has taken over the new tab page in the Brave browser today! 🎮 The secret is out: Brave Ads are a powerful way to reach Brave's over 100 million users. Much of this audience is unreachable through other channels. If you want to make a splash with your own product, learn more about Brave Ads here: https://lnkd.in/eF4VwGVa
-
-
Brave reposted this
🎯 AI Enterprise Strategist ✔Globalization Consultant and Business Connector 💡 Localization VP 🎉Content Creator 🔥 Podcast Host 🎯 LocDiscussion Brainparent ➡️ LinkedIn B2B Marketer 🔥 LangOps Pioneer
LLM-Powered Search Is Becoming a Conversation. What Does That Mean For Translation? 🔥🔥🔥⬇️ Have you also noticed that the way we look for things online is fundamentally changing? I can’t remember the last time I “googled” something the old-fashioned way and scrolled through a bunch of mostly irrelevant hyperlinks. Is anyone still doing that? Remember how that worked just a couple of years ago? In this clip from my agile localization Podcast by Crowdin interview with Andy Andersen, International Growth Product Manager at Brave, we discuss how LLM-powered search is changing the way users find and consume content, and why that matters for our work in the language industry. Brave’s “Ask Brave” feature no longer returns a list of links. It engages users in continuous conversation. You ask "What is Crowdin?" Then follow up with "What are its selling points?" And the model keeps going... But if your multilingual content isn’t accurate, LLMs will pick up the wrong info, and it spirals from there. So what does that mean for localization best practices, you reckon? How do we adapt our content for dialogue, not just search indexing? Are our localized pages structured in a way that helps models extract trustworthy information? What happens when your source language isn’t the only source that matters anymore? That’s the new localization battleground: making sure your multilingual content is correct, complete, and contextual in every language because it’s now part of how people interact with AI. Moving beyond translation alone, how do you think we can best structure multilingual content for AI discoverability and dialogue going forward? The link to the full episode of the agile localization Podcast by Crowdin is in the comments.
-
Learn how to navigate AI resistance and help team members feel confident and secure in their use of AI tools on the newest #TheBraveTechnologist episode, featuring Bhava Communications Founder & CEO Elizabeth Zaborowska. 🎧 Listen to the full episode, hosted by @LukeMulks, here: https:// brave.com/podcast/e93
-
Brave reposted this
🔍 Privacy isn’t just a setting—it’s the new currency for creators building their brands. In Episode 12 of #PrivacyInMotion with Midnight and Brave, Debbie Soon dives into the complicated balance between exposure and control. When your data, identity, and income intertwine, what does it really mean to own your story? ▶️ Watch the full video here: https://lnkd.in/gHbSnviH [Partner Content]
-
The Brave team is at TechCrunch Disrupt 2025 in San Francisco this week! We'll be at booth L5 through Wednesday. Come visit us! Register for the event here: https://lnkd.in/gUH7vrh9
-
Reader's Digest has a new article discussing the worst browser for privacy and spoiler, it's Chrome. After calling out Chrome's extensive data collection, the article moves onto recommend privacy-preserving alternatives, including our browser. 🦁 "I’ve personally been using Brave browser for years, and it’s far and away my favorite of all the ones I’ve tried," writes Lucas Coll. "It takes privacy and security seriously, and it’s user-friendly, fast and responsive." More through the link!
-
The Brave Search API has earned our first SOC 2 Type II attestation following a thorough external audit! SOC 2 provides independent verification to Search API customers that our internal security practices meet industry standards. You can read more about SOC 2 and the auditing process we underwent in this blog: https://lnkd.in/exDmNh_5
-