TheRegister's platform is a leading technology news website, offering insights into IT industry news, hardware reviews, and software updates. Through articles, analysis, and opinion pieces, TheRegister offers insights into cybersecurity threats, technology trends, and industry developments. Readers can stay updated with the latest news and analysis from the world of technology and IT business.

The Register

A high-severity vulnerability (CVE-2026-0628) in Google Chrome allowed malicious browser extensions to hijack the embedded Gemini Live AI panel and inherit its elevated privileges. Because Gemini Live has deep system access — including screenshots, local file reads, and camera/microphone control — a rogue extension exploiting the flaw could activate those capabilities far beyond normal extension permissions. The attack required only ordinary extension behavior to exploit Chrome's flawed network rule handling for the AI panel. Google patched the bug in Chrome 143.0.7499.192/193 in early January 2026. The incident highlights how tightly integrating AI features with core browser functionality expands the attack surface and complicates the browser's threat model.

Chrome AI panel became privilege escalator for extensions