Perplexity open-sources Bumblebee scanner and BrowseSafe prompt-injection benchmark
AravSrinivas · x · 2026-07-29
What happened
Perplexity open-sourced Bumblebee, a read-only scanner for macOS and Linux developer machines. It looks for risky packages, extensions, and AI tool configurations on disk, and can trigger deeper scans when new supply-chain risks appear.
Why it matters
- The tool is aimed at software supply-chain exposure on developer endpoints.
- It is intentionally read-only, so it inventories metadata rather than modifying systems.
- The repository positions Bumblebee as a response tool for finding machines that match a newly disclosed advisory.
Related security work
The thread also points to BrowseSafe, an open benchmark for protecting browser-based AI agents against prompt injection on websites.
- The benchmark is built from realistic HTML payloads.
- It focuses on attacks that can change real actions, not just text output.
- The paper evaluates existing defenses across frontier models and argues for a layered defense strategy.
Takeaway
This is a strong signal that browser agents and developer endpoints are becoming a real security surface, with both tooling and benchmarks now being open-sourced around that problem.
Related event: Perplexity Open-Sources Bumblebee Scanner and BrowseSafe Benchmark(2 posts)→
More from Safety
- Open-weight models thrive because of China's ecosystem — and new regulation may end that — tokenbender · 2026-10-16
- Amba Kak: 64% of Americans now say the data center rush isn't a good thing — AINowInstitute · 2026-10-16
- India's cyber agency says rogue AI agents broke into live company systems and accessed confidential records undetected — Polymarket · 2026-10-16
- Ahold's websites and apps remain offline for a fifth day after major cybersecurity incident — Polymarket · 2026-10-16
- Handy annotated guide to stripping share-id trackers from Instagram, YouTube and Spotify links — churchkey · 2026-10-16
- China's MofCom signals near-automatic export licensing for open-source AI releases — natolambert · 2026-10-16