Advertisement
Google Cloud Post-Quantum Roadmap Targets 2029 Readiness
Google Cloud updates its roadmap for post-quantum cryptography (PQC) migration, aiming for full infrastructure readiness by 2029, addressing future quantum threats.
Modern Google Workspace Attack Chain: OAuth & AI Agent Risks
The modern Google Workspace attack chain exploits OAuth grants, not just email. Understand how attackers and AI agents compromise accounts and secure your environment.
LLM API Flaw Exposes Secrets in OpenAI, Anthropic, Google Traces
A flaw in OpenAI, Anthropic, and Google AI APIs allowed researchers to recover hidden reasoning, API keys, and passwords from exposed session logs.
Chrome 151 Update Patches 41 Critical, High-Severity Flaws
Google's Chrome 151 update addresses 41 critical and high-severity vulnerabilities, including memory safety bugs potentially leading to RCE.
Pixel 9 Zero-Click RCE: Exploiting Dolby Unified Decoder
Project Zero details a zero-click exploit chain targeting Google Pixel 9 via the Dolby Unified Decoder, leading to arbitrary code execution.
Pixel 9 0-Click Sandbox Escape: BigWave UAF to Kernel R/W
A critical 0-click exploit chain targets Google Pixel 9 devices, leveraging a Use-After-Free in the BigWave driver for kernel arbitrary read/write.
UNC6671 Rebrands: Multi-Brand Vishing and Cloud Extortion
Google Threat Intelligence Group tracks UNC6671 shifting through Redact, Pink, Helix, and Falcon extortion brands while targeting cloud environments.
Pass-ta-key Attacks Hijack Google-Synced Passkeys on Windows
Researchers uncover Pass-ta-key attack methods that allow malware to hijack passkey-protected accounts on Windows without user interaction.
Firebase Misconfiguration in tl;dv AI Tool Exposes Sensitive Meeting Data
A Google Firebase misconfiguration in the tl;dv AI meeting tool allows unauthorized access to sensitive government and corporate video call information.
Greatness PhaaS Adds Device Code Phishing for MFA Bypass
Greatness PhaaS now supports device code phishing, abusing OAuth 2.0 to bypass MFA and seize accounts on Microsoft 365, Google Workspace, and more.
Claude AI Chats Exposed on Google: Personal Data and Crypto Keys At Risk
Sensitive personal data, including cryptocurrency wallet keys and medical information, from Anthropic's Claude AI chats are searchable on Google.
Google ADK for Python RCE: Agent-to-Agent Attacks Expose Secrets
Pillar Security uncovered agent-to-agent RCE flaws in Google's ADK for Python, allowing secret exposure and PR tampering, risking supply chain integrity.
Google Chrome Blocks Malicious New Tab Hijacker Extensions on Unmanaged Devices
Google Chrome will soon block policy-installed extensions from hijacking the New Tab page or changing the default search engine on unmanaged Windows and macOS devices.
Google Chrome Updates Resolve 1,442 Security Flaws
Google Chrome recently addressed 1,442 security flaws across versions 149, 150, and 151. Learn why immediate updates are crucial for user security.
Google AI Agent Uncovers 13-Year-Old Chrome Flaw
Google's AI agent harness identified a 13-year-old flaw in Chrome's codebase, highlighting AI's role in vulnerability research and Google's patching efforts.
AI-Powered Vulnerability Research: Google Patches 1,000+ Chrome Bugs
Google utilizes Big Sleep AI to identify and remediate over 1,000 security vulnerabilities in Chrome releases, signaling a shift in automated bug hunting.
Google Unified Threat Actor Naming: TAG and Mandiant Convergence
Google unifies threat actor naming across TAG and Mandiant to streamline attribution and improve intelligence sharing for security operations teams.
Confused Deputy Flaws in Google Cloud & Azure: Admin Bypass
Analysis of 'Confused Deputy' vulnerabilities across Google Cloud and Microsoft Azure, enabling administrative privilege escalation and access control bypass.
Google Threat Intel Adopts Unified Cryptonym Naming for Actors
Google Threat Intelligence Group (GTIG) rolls out a new two-word cryptonym-based naming schema for threat actors, standardizing tracking across platforms for enhanced…
Google Fined €890M: Evaluating Digital Markets Act Compliance Risks
Google faces a $1 billion EU fine for Digital Markets Act breaches. This report analyzes the technical compliance risks for search engines and app stores.
Google Gemini 3.5 Flash Cyber AI: Advanced Vulnerability Management
Google launches Gemini 3.5 Flash Cyber, a specialized AI for rapid vulnerability discovery, validation, and patching, available to governments via CodeMender.
Russian-Speaking Hacker Uses Google Gemini CLI for Botnet Control
Russian-speaking actor bandcampro utilized Google Gemini CLI to automate botnet control and password cracking across compromised dental healthcare systems.
Google Cloud Agentic Defense: Automating AI-Driven Security Response
Google Cloud integrates Wiz and Mandiant capabilities into its new Agentic Defense model, using AI agents to automate complex threat detection workflows.
EU Orders Android 18 to Open AI Hardware Access to Rivals
The EU orders Google to grant rival AI assistants deep hardware access in Android 18, raising concerns over microphone, camera, and screen data privacy.