This week in the wild west roundup:

Brave demonstrates another prompt injection attack via images that affects most AI browsers.

Microsoft 365 Copilot allows arbitrary data exfiltration via Mermaid diagrams.

Google Gemini's own demo breaks Google's own captchas without asking the user for permission.