:

CHROME DOWNLOADS 4GB AI FILE WITHOUT USER CONSENT

AI DESK2 MIN READ
WED, MAY 6, 2026

■ AI-SUMMARIZED FROM 1 SOURCE BELOW

A researcher has alleged that Google Chrome automatically downloads a 4GB artificial intelligence model file without user permission, with the file reappearing even after deletion.

Security researcher Max Kostyan discovered that Chrome initiates a multi-gigabyte download related to AI functionality without explicit user consent or clear notification. The downloaded file persists on user systems even when manually deleted, suggesting an automatic re-download mechanism. The file in question appears connected to Chrome's AI-powered features, though Google has not publicly detailed the exact purpose or contents. The discovery raises questions about bandwidth usage, storage space, and user control over system resources. Kostyan's findings indicate that the download occurs independently of user settings or preferences. The behavior contradicts standard practices where significant resource-intensive operations require explicit opt-in from users. The reappearance of the file after deletion suggests Chrome's system is designed to maintain the AI model regardless of user intervention. This functionality could impact users with limited storage space or data caps, particularly on systems where multiple users share resources. Google has not immediately responded to the allegations. The discovery adds to ongoing discussions about browser behavior transparency and user autonomy over system resources. The incident highlights broader concerns about how tech companies implement AI features and the level of disclosure provided to users. Similar issues have surfaced with other major browsers implementing background downloads for functionality updates and feature support. Users concerned about the download can check their system storage and browser cache directories. However, the automatic re-download mechanism means manual deletion may not provide a permanent solution until Google addresses the underlying behavior or provides official settings to disable the feature.

■ SOURCES

Engadget

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

Disc Soft Limited confirmed that DAEMON Tools Lite was compromised in a supply chain attack and has released a clean version of the software.

1H AGOSecurity Desk

Coupang reported Q1 revenue of $8.5 billion, up 8% year-over-year, but posted a net loss of $266 million following a major customer data breach in South Korea—its largest quarterly loss since Q4 2021.

6H AGOSecurity Desk

Security camera companies are deploying AI to provide detailed descriptions of surveillance footage, but the technology frequently misidentifies objects with significant consequences. Brake lights trigger fire alerts and humans register as bears.

6H AGOAI Desk

Palo Alto Networks has disclosed a critical remote code execution vulnerability in PAN-OS that is actively being exploited in the wild. The unpatched flaw affects the User-ID Authentication Portal.

7H AGOSecurity Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.