NewsCVE-2026-0628 Chrome Gemini Live Hijack CVSS 8.8The Hacker News·high signalXBlueskyLinkedInCopy linkMalicious Chrome extensions could hijack Gemini Live panel for webcam, mic, file access via declarativeNetRequest APISourceSource pageThe Hacker News↳ Follow the threadPolicy dependency / Stack layerMoadim Ships an MIT-Licensed Scheduler That Runs Coding Agents on a Cron Instead of a PromptMoadim, via Hacker News Show HNStack layer / Threat patternAWS open-sourced a HyperPod control plane that exposes 38 MCP tools with parameter validation before executionAWS Machine Learning BlogStack layer / Threat patternDeepMind's WeatherNext 3 trains on live satellite data instead of six-hour-lagged NWP outputGoogle DeepMind Blog (corroborated by TechCrunch)Policy dependency / Stack layerAWS Published a Walkthrough for Routing OpenAI Codex Through Your Own Bedrock GatewayAWS Machine Learning BlogStack layer / Threat patternThe Post-Training Method, Not the Data, Decides How Refusal Is Computed Inside a ModelarXiv 2609.03887Stack layer / Threat patternGoogle's WeatherNext 3 Cuts Forecast Grids From 25km/6h to 5km/1h and Ships Into Search and MapsGoogle BlogStack layer / Threat patternThe OpenCode session-header enforcement deadline is now visibly pulling fixes out of Zed and OpenCode itselfGitHubPolicy dependency / Stack layerIntuit's Bedrock failover agent cut disaster recovery from hours to about 20 minutes across thousands of microservicesAWS Machine Learning Blog