New macOS ClickFix attack silently mounts DMGs to push infostealer

A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware from ...
The Next Web

Chrome is putting things on your computer you never agreed to

Chrome quietly pushed a 4GB Gemini Nano AI model to users, while a fake Perplexity extension wiretapped searches. Two sides of Chrome's consent problem.
Microsoft

Chromium extension uses AI‑related branding to redirect browser search

A malicious Chromium-based extension that spoofs the AI-powered answer engine Perplexity AI redirects browser search traffic using MV3 APIs and intermediary infrastructure.
CNET on MSN

Chrome has been secretly downloading AI to your computer. Here's what you can do

Chrome Has Been Secretly Downloading AI to Your Computer. Here's What You Can Do ...
Microsoft

AutoJack: How a single page can RCE the host running your AI agent

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...