BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension.
Microsoft's latest weekly VS Code release makes its AI-assisted publishing process explicit while adding Dev Container agent sessions, expanded Codex support and automated session cleanup.
Compare 11 open-source agent harnesses for local LLMs, including OpenCode, Pi, Goose, Cline, OpenHands, Aider, and Codex CLI.
Researchers escaped OpenAI's Codex sandbox two ways, one running commands on a developer's machine from its most locked-down mode. OpenAI has patched both.