

They have and they’ve explicitly said it’s not solved lmao
A 1% attack success rate—while a significant improvement—still represents meaningful risk. No browser agent is immune to prompt injection, and we share these findings to demonstrate progress, not to claim the problem is solved
Mitigating the risk of prompt injections in browser use \ Anthropic - https://www.anthropic.com/research/prompt-injection-defenses








Click Here, by Dina Temple-Raston