A critical isolated-vm flaw lets untrusted JavaScript escape the V8 sandbox and potentially hijack the host process.
A 41-day experiment reveals how JavaScript-only navigation limits AI crawler discovery and why fixing it later can be harder.