A weekly security roundup points to the same weak seam in four different places: routing, code reuse, browser prompts, and AI authority.