Security News Work Moved Into the Browser. Security Didn't. AI Is Exposing the Gap TheHackerNews Daniel Bender 27 Apr 2026 User-initiated shell ran via HTTPS CAPTCHA at 2:14 p.m. Tuesday, exposing browser blind spot and breaking session attribution.
