First, they are trained to complete tasks, not to be security aware. The primary objective of Browser AI Agents is to interpret and perform actions based on the user's instructions as efficiently and accurately as possible, even if certain steps may expose them to security risks. Unlike employees, they do not receive regular security training on identifying malicious behaviour and the latest threat vectors. Additionally, the employees behind these agents are likely not security aware enough to provide the necessary security guardrails in these prompts.

Second, the Browser AI Agents are performing actions on the user's behalf, with the same privilege level as the user, frequently with access to the user's identity, enterprise apps and company data that the employee is granted access to. As a result, there is no way for the browser or service provider to differentiate between the actions performed by the user and the Browser AI Agents.

In other words, not only do these agents have the same level of access as employees, they have poorer security awareness than an average employee. This makes them especially susceptible to any attack designed to target employees, allowing attackers to recycle many of their "basic" attack campaigns that no longer work on many employees.