Venture capitalist Yuechen Zhao, a partner at Informed Ventures, asked the consumer AI agent Instinct to look up hotels on Booking.com this month. The agent offered to fill out the booking form if he entered his credit card information into the Vault, Instinct's credential manager. Zhao tested the process with a fake credit card number and challenged the agent to read the numbers back. The agent acknowledged it could see his credit card and passwords and read them back in plain text by running a JavaScript on the webpage.
Related Articles
Don't miss out on breaking stories and in-depth articles.