Advertisement
Pushpaganda Scam: Detecting AI-Driven Ad Fraud in Google Discover
Researchers unmask Pushpaganda, a campaign using AI-generated content and SEO poisoning to trick users into enabling malicious browser notifications.
Pixel 10 Modem: Google Implements Rust-Based DNS Parser
Google integrates Rust-based DNS parsing in Pixel 10 modem firmware to eliminate memory-safety risks and prevent remote code execution at the baseband level.
APT41 Deploys Stealth Backdoor for Cloud Credential Harvesting
China-linked APT41 is targeting AWS, Azure, and Google Cloud with a new zero-detection backdoor designed to harvest credentials and maintain persistence.
Google Workspace CSE: Securing Gmail on Android and iOS
Google introduces native client-side encryption for Gmail on Android and iOS, enabling enterprise users to control encryption keys on mobile devices.
Google Gmail Client-Side Encryption for Android and iOS — Deployment Guide
Google expands Gmail client-side encryption (CSE) to Android and iOS, giving enterprise users full control over encryption keys for mobile email communications.
Chrome DBSC: Securing Session Cookies with Device Binding — Analysis
Google introduces Device Bound Session Credentials in Chrome to combat session hijacking by cryptographically linking authentication cookies to local hardware.
Google Chrome 146 DBSC Implementation Hardens Windows Against Session Hijacking
Google releases Device Bound Session Credentials (DBSC) in Chrome 146 for Windows to mitigate cookie theft and session hijacking via hardware-backed security.
Exposed Google API Keys in Android Apps Grant Gemini Access
Analysis of Google API keys found in Android apps that enable unauthorized access to Gemini AI endpoints, detailing risks and mitigation for developers.
TeamPCP Supply Chain Campaign: Cisco Source Code Stolen, UNC6780 Activity
Analysis of the TeamPCP supply chain campaign, including the theft of Cisco source code and over 1,000 compromised SaaS environments tracked by Google GTIG as UNC6780.
Claude Mythos Identifies Thousands of Zero-Day Flaws in Major Systems
Anthropic's Project Glasswing uses the Claude Mythos AI model to uncover thousands of zero-day vulnerabilities across infrastructure from AWS, Google, and Cisco.
Google DeepMind Research: Six Web Attack Vectors Against AI Agents
DeepMind researchers reveal how malicious web content can manipulate AI agents, highlighting risks like indirect prompt injection and data exfiltration.
Google Accelerates Post-Quantum Cryptography Transition for 2029
Google announces a full migration to post-quantum cryptography by 2029 to ensure crypto-agility and defend against future quantum computing threats.
OAuth 2.0 Device Code Phishing Surge: Protecting M365 and Google
Device code phishing attacks have surged 37x this year. Learn how adversaries abuse the OAuth 2.0 Device Authorization Grant to bypass MFA and hijack accounts.
Coruna: Sophisticated iPhone Hacking Toolkit Bypasses iOS Defenses
Google researchers uncovered "Coruna," a powerful iOS exploit kit leveraging 23 vulnerabilities to silently install malware on iPhones, likely state-sponsored.
CVE-2026-5281: Google Dawn RCE via Use-After-Free — Mitigation Guide
CISA adds CVE-2026-5281 to the Known Exploited Vulnerabilities Catalog following evidence of active exploitation in Google Dawn's WebGPU implementation.
NoVoice Android Malware on Google Play: 2.3 Million Devices Infected
NoVoice Android malware, disguised in over 50 Google Play apps, infected 2.3 million devices, exhibiting aggressive adware and subscription fraud.
Google Chrome Zero-Day Patch: Fourth In-the-Wild Exploit
Google has released an urgent security update for Chrome, patching the fourth zero-day vulnerability actively exploited in 2024. Update now to protect against…
Google Vertex AI Security: Mitigating AI Agent Weaponization
Google patches security flaws in Vertex AI after Unit 42 researchers demonstrated how to weaponize AI agents for unauthorized data access and exfiltration.
Google Drive Ransomware Protection Enabled by Default for Workspace
Google Workspace now enables AI-powered ransomware detection by default for paying users to identify and mitigate cloud-based encryption threats automatically.
Axios npm Supply Chain Attack Attributed to North Korea's UNC1069
Google Threat Intelligence attributes a major Axios npm supply chain attack to North Korean group UNC1069, emphasizing risks to developer environments.
Google Vertex AI Over-Privilege: Data Theft & Cloud Intrusion Risk
Palo Alto Networks researchers found over-privileged AI agents in Google Vertex AI could be exploited for data exfiltration and access to restricted cloud infrastructure.
Google Gmail Address Migration: Security and Identity Implications
Google introduces Gmail address changes in the U.S., presenting new challenges for identity verification, account recovery, and phishing defense.
Android Developer Identity Verification: New Google Play Mandates
Google mandates identity verification for all Android developers to reduce malicious app distribution and improve Play Store transparency starting September.
Vertex AI Permission Flaw Exposes Google Cloud Data — Mitigation Guide
Researchers uncover a security blind spot in Google Cloud Vertex AI, allowing attackers to weaponize AI agents for unauthorized data access and compromise.