GlicJack: How a Browser Extension Could Hijack Chrome's Gemini AI
CVE-2026-0628 allowed any Chrome extension with basic permissions to hijack the Gemini side panel — gaining access to your camera, microphone, local files, and screenshots. Here's what happened and what it means for browser-embedded AI.