The Hacker News

PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems

PCPJack steals credentials via 6 Python modules exploiting 5 CVEs, enabling cloud spread and fraud-driven attacks.
Microsoft

When prompts become shells: RCE vulnerabilities in AI agent frameworks

New research exposes how prompt injection in AI agent frameworks can lead to remote code execution. Learn how these ...

OpenAI's Codex Now Works in Chrome With New Extension

OpenAI today launched Codex for Chrome, a Chrome extension that lets Codex work directly in the browser on Macs and PCs. With ...

Google Chrome may have silently installed 4GB AI model on your computer. Here's how to check

On May 4, 2026, Alexander Hanff, a computer scientist and lawyer who runs the website ThatPrivacyGuy.com, posted an article ...

The Tiny AI Model That Lives Inside the Chrome Browser Hallucinates a Whole Lot

Gemini Nano has lived on devices since 2024, Google told Gizmodo on Wednesday. According to a Google blog post, the tiny ...