Google’s Silent AI Install: What They’re Hiding in Your Files | Threat Wire

Google Chrome has been silently installing 4 GB of Gemini Nano AI model files on user devices without permission, with the file automatically re-downloading after deletion unless Chrome AI features are disabled via flags or enterprise policy. The weekly cybersecurity roundup also covers Dirty Frag, a new Linux zero-day (CVE-2026-43284 and CVE-2026-43500) enabling local privilege escalation with no patches yet available, a ransomware attack on Canvas LMS by ShinyHunters, OpenAI's ChatGPT 5.5 release, a critical 10.0 CVSS vulnerability in Google Gemini CLI, AI-assisted zero-day exploit development by threat actors, and a Let's Encrypt certificate issuance outage.