Researchers Hijack OpenAI's Atlas Browser Into Spamming WhatsApp Contacts, Attempting Amazon Purchase
Security firm Zenity showed at Black Hat 2026 that OpenAI's Atlas browser could be tricked by hidden webpage instructions into messaging every contact in a user's WhatsApp Web account and into adding an item to an Amazon cart. OpenAI is retiring Atlas on August 9, but researchers say the underlying problem, AI agents blindly following instructions buried in untrusted web content, affects nearly every major AI browser tool on the market.