# Agentic Browser Security: 2025 Year-End Review

DevFeed: [Agentic Browser Security: 2025 Year-End Review](<https://devfeed.tech/articles/agentic-browser-security-2025-year-end-review-53667.md>)

Original publisher: [Read original article](<https://www.wiz.io/blog/agentic-browser-security-2025-year-end-review>)

Author: Rami McCarthy

Published: 2026-01-16T17:23:17Z

Content type: article

Language: en

Sources: [Wiz](<https://devfeed.tech/sources/wiz-blog-rss-feed.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Security research](<https://devfeed.tech/topics/security-research.md>), [prompt injection](<https://devfeed.tech/topics/prompt-injection.md>), [browser](<https://devfeed.tech/topics/browser.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [sensitive data](<https://devfeed.tech/topics/sensitive-data.md>), [sessions](<https://devfeed.tech/topics/sessions.md>), [Query (disambiguation)](<https://devfeed.tech/topics/query.md>)

Tags: [agentic](<https://devfeed.tech/tags/agentic.md>), [agents](<https://devfeed.tech/tags/agents.md>), [ai](<https://devfeed.tech/tags/ai.md>), [csrf](<https://devfeed.tech/tags/csrf.md>), [data](<https://devfeed.tech/tags/data.md>), [exfiltration](<https://devfeed.tech/tags/exfiltration.md>), [indirect-prompt-injection](<https://devfeed.tech/tags/indirect-prompt-injection.md>), [phishing](<https://devfeed.tech/tags/phishing.md>), [production](<https://devfeed.tech/tags/production.md>), [prompt-injection](<https://devfeed.tech/tags/prompt-injection.md>), [research](<https://devfeed.tech/tags/research.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

This 2025 year-end review examines agentic browsers that autonomously read web pages and complete tasks. It surveys attacks including indirect prompt injection, phishing, data exfiltration, URL-based hijacking, and memory poisoning, alongside defensive research and the trade-off between browser autonomy and access to sensitive information.

## Source excerpt

Are agentic browsers the new Flash? A 2025 review of new attacks, vendor security layers, and a roadmap for navigating AI browser risks.