-
Google has announced a $250,000 reward, called the “Root-in-Cloud” program, for researchers who can demonstrate complete administrative takeover of arbitrary Google Cloud projects or organizations without prior access. Google announced the …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user’s Internet connection out to strangers and conducts advertising fraud. Experts involved in the takedown say the action is likely to sever the botnet’s access to more than 10 million additional compromised systems, including other Internet of Things (IoT) products such as Android-based healthcare devices and karaoke machines.
·
A Little Sunshine, Alarum Technologies, AppSalt, Ben Brundage, BMW/IPWeb, EarnFM, GaGaNode, Google, Google Threat Intelligence Group, Honeygain, Internet of Things (IoT), Jaguar, Kimwolf, LINKFOG, MECOOL, Motion Picture Association, Ne’er-Do-Well News, NetNut, Skyworth Technology, Source, Superbox, Synthient, Traffmonetizer, Web Fraud 2.0, XCPE botnet¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Discord will make eligible messages from public channels in Discoverable Servers accessible through Google and other search engines, expanding conversations beyond its application. This rollout introduces privacy considerations, messages from members a…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The Cybersecurity and Infrastructure Security Agency (CISA) offers two free assessment tools, ScubaGear and ScubaGoggles, to help organizations identify insecure configurations in Microsoft 365 and Google Workspace. Developed under the Secure Cloud Bus…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google has enhanced Chrome’s AI-powered scam defenses with a new server-side Gemini model that detects fake antivirus alerts, fraudulent browser updates, and other deceptive websites. Announced on October 20, 2026, these changes expand protection…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google released Chrome version 156 to the stable channel for Windows, macOS, and Linux, addressing 353 security vulnerabilities, including six critical flaws. Announced on October 20, 2026, this update addresses memory corruption, use-after-free errors…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A software supply chain campaign that hijacked AOMEI Technology’s update infrastructure to distribute hidden backdoors. Tracked as UNC7017, the attackers briefly altered server configurations between April and July 2026, then restored legitimate conten…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A suspected China-linked espionage group exploited a critical BeyondTrust Remote Support vulnerability as a zero-day in late August 2026 weeks before BeyondTrust disclosed it on October 15. Mandiant, which investigated the incident, found the attackers…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google has awarded XBOW $250,000 for creating an AI-assisted exploit chain that enabled code execution outside the Chrome browser’s renderer sandbox on Windows. This reward marks the first full-chain payout for Chrome under Google’s vulnerability…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Check Point Research found two LiteLLM vulnerabilities that could let low-privilege users execute code, access sensitive files, hijack admin accounts, and steal AI provider API keys.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
