Chrome CVE-2026-0628 let malicious extensions hijack Gemini panel for privilege escalation, local file access, and surveillance.

A Chrome vulnerability allowed malicious extensions to hijack the browser’s Gemini Live assistant to spy on users and ...

目前尚不清楚这个问题是否曾在实际环境中被利用。然而，在两天前发布的Reddit帖子中，一名用户声称"被盗"的Google云API密钥在2026年2月11日至12日期间产生了82314.44美元的费用，而通常每月的支出为180美元。

A bug in Google Chrome's Gemini AI feature could expose your data or allow attackers to monitor you. Here's how to stay protected.

AIPress.com.cn报道3月2日消息，TruffleSecurity研究人员披露了一项安全研究，指出 Google Cloud API 密钥——谷歌多年来明确告知开发者可以安全嵌入公共代码的凭证——如今可以在无提示的情况下与 Gemini API 进行身份验证，从而让任何发现这些密钥的人访问上传文件、缓存数据以及计费的 AI 资源。该问题于 2026 年 2 月 ...

Attackers could have exploited the vulnerability to escalate privileges, violate user privacy while browsing, and access sensitive resources ...

Investment accelerates customer adoption and delivery of Skema's data-rich design capabilities across the full project ...

An OpenClaw vulnerability allowed malicious websites to take over AI agents, exposing sensitive information and enabling data ...

With progress slowing to a crawl, I researched Windows App SDK alternatives and then started experimenting with AI pair programming.