Chrome CVE-2026-0628 let malicious extensions hijack Gemini panel for privilege escalation, local file access, and ...

A bug in Google Chrome's Gemini AI feature could expose your data or allow attackers to monitor you. Here's how to stay protected.

A：该漏洞可能允许恶意扩展程序控制Chrome的Gemini Live面板，实现权限升级。攻击者可以在未经许可的情况下访问受害者的摄像头和麦克风，对任何网站进行截屏，访问本地文件，并向特权页面注入恶意脚本或HTML代码。

传统开发模式中，网站、小程序的搭建需要掌握 HTML、CSS、JavaScript 等专业编程语言，组建技术团队的成本动辄数十万元，开发周期长达数月。而咖咖呱呱通过 “可视化拖拽 + AI 智能生成” 的双引擎模式，将复杂的代码逻辑封装为可直接使用的组件模块，用户无需任何编程基础，只需像 “搭积木” 一样选择功能、调整布局，就能完成从设计到上线的全流程。

Katherine Haan, MBA, is a Senior Staff Writer for Forbes Advisor and a former financial advisor turned international bestselling author and business coach. For more than a decade, she’s helped small ...