Tag: google
-
Hackers Use SEO Poisoning to Fake Gemini CLI, Claude Installers
Financially motivated threat actors are running an active campaign that impersonates Google’s Gemini CLI and Anthropic’s Claude Code, using SEO poisoning to deliver a fileless PowerShell infostealer to developer workstations worldwide. First identified in early March 2026 by EclecticIQ researchers, the campaign represents a calculated escalation in supply-chain-focused eCrime targeting AI developer tooling. The infection…
-
Hackers Use SEO Poisoning to Fake Gemini CLI, Claude Installers
Financially motivated threat actors are running an active campaign that impersonates Google’s Gemini CLI and Anthropic’s Claude Code, using SEO poisoning to deliver a fileless PowerShell infostealer to developer workstations worldwide. First identified in early March 2026 by EclecticIQ researchers, the campaign represents a calculated escalation in supply-chain-focused eCrime targeting AI developer tooling. The infection…
-
Deleted Google API keys remain active for up to 23 minutes, study finds
First seen on scworld.com Jump to article: www.scworld.com/brief/deleted-google-api-keys-remain-active-for-up-to-23-minutes-study-finds
-
Google AI engineer claims dismissal for opposing tech sales to Israel
‘Our work on AI was sold to facilitate genocide’: Artificial intelligence engineer claims Google unfairly sacked them for internally criticising the company’s decision to continue supplying technology to the Israeli military, despite credible claims of war crimes committed in Gaza First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366643389/Google-AI-engineer-dismissed-for-opposing-tech-sales-to-Israel
-
Google’s Exploit Code Release Raises Concern Over Unfixed Chromium Security Bug
Google’s recent release of proof-of-concept (PoC) exploit code for a still-unpatched Chromium vulnerability has sparked significant concern across the cybersecurity community. The flaw, first reported in late 2022 by security researcher Lyra Rebane, remains unresolved after more than three years, exposing millions of users of Chromium-based browsers such as Google Chrome, Microsoft Edge, Brave, and…
-
Deleted Google API keys keep working for up to 23 minutes, researchers warn
Google API keys are credentials that let applications access Google services, from Maps to the Gemini AI. If a key is leaked, an attacker can use it to make API calls, rack up … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/05/22/deleted-google-api-keys-risk/
-
Google API Keys Remain Active After Deletion
A security researcher discovered the API keys can still be used for 23 minutes after deletion, even though the cloud provider claims deletion is immediate. First seen on darkreading.com Jump to article: www.darkreading.com/identity-access-management-security/google-api-keys-active-after-deletion
-
Google accidentally exposed details of unfixed Chromium flaw
Google has accidentally leaked details about an unfixed issue in Chromium that keeps JavaScript running in the background even when the browser is closed, allowing remote code execution on the device. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-accidentally-exposed-details-of-unfixed-chromium-flaw/
-
Deleted Google API Keys Remain Active up to 23 Minutes, Study Finds
Deleted Google API Keys remain active for up to 23 minutes after deletion, exposing GCP, Gemini, BigQuery, and Maps data to attackers. First seen on hackread.com Jump to article: hackread.com/deleted-google-api-keys-active-23-minutes/
-
Google Chrome Security Flaws Could Let Attackers Execute Code Remotely
Google has released a critical security update for its Chrome browser, addressing multiple vulnerabilities that could allow attackers to execute arbitrary code on affected systems. The update, now rolling out to users globally, upgrades Chrome to version 148.0.7778.178/179 for Windows and macOS, and 148.0.7778.178 for Linux. According to the official Chrome Releases blog, the latest…
-
Chromium-Exploit geleakt: Google-Panne gefährdet Millionen von Browser-Nutzern
Eine gefährliche und schon Ende 2022 gemeldete Chromium-Lücke ist noch immer ungepatcht. Jetzt kursiert ein Exploit im Netz – wegen einer Panne bei Google. First seen on golem.de Jump to article: www.golem.de/news/millionen-nutzer-gefaehrdet-google-leakt-exploit-fuer-ungepatchte-chromium-luecke-2605-208904.html
-
P2PInfect Botnet Targets Kubernetes via Exposed Redis
A persistent P2Pinfect botnet campaign targeting Google Kubernetes Engine (GKE) clusters through exposed Redis instances, highlighting how a single cloud misconfiguration can enable long-term compromise. In several investigated environments, attackers maintained access for up to six months, with consistent botnet activity detected through FortiCNAPP composite alerts. The intrusion chain began with publicly exposed Redis services,…
-
P2PInfect Botnet Targets Kubernetes via Exposed Redis
A persistent P2Pinfect botnet campaign targeting Google Kubernetes Engine (GKE) clusters through exposed Redis instances, highlighting how a single cloud misconfiguration can enable long-term compromise. In several investigated environments, attackers maintained access for up to six months, with consistent botnet activity detected through FortiCNAPP composite alerts. The intrusion chain began with publicly exposed Redis services,…
-
Google publishes exploit code threatening millions of Chromium users
Google publishes exploit code before patch, reported 29 months earlier, is fixed. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/05/google-publishes-exploit-code-threatening-millions-of-chromium-users/
-
Bulgaria fires up Google Cloud for national cyber security
The Bulgarian national systems integrator, BIS, has deployed Google Cloud’s Cybershield government security service as part of a national federated SOC deployment. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366643458/Bulgaria-fires-up-Google-Cloud-for-national-cyber-security
-
Digitale Souveränität: Thales und Google Cloud kündigen von USA unabhängige Cloud an
Thales und Google Cloud wollen mit einer neuen Plattform deutsche Daten vor Zugriffen aus den USA schützen. First seen on golem.de Jump to article: www.golem.de/news/digitale-souveraenitaet-thales-und-google-cloud-kuendigen-von-usa-unabhaengige-cloud-an-2605-208888.html
-
Railway: Google sperrt Kundenkonto und legt ganze Cloudplattform lahm
Die Cloud-Deployment-Plattform Railway hat einen mehrstündigen Ausfall gehabt. Ursache ist ein plötzlich und unerwartet gesperrtes Google-Cloud-Konto gewesen. First seen on golem.de Jump to article: www.golem.de/news/railway-google-sperrt-kundenkonto-und-legt-ganze-cloudplattform-lahm-2605-208869.html
-
Mac Users Face New Malware Threat Spoofing Apple, Google, and Microsoft
A new SHub Reaper macOS infostealer spoofs prompts from Apple, Google, and Microsoft to steal passwords, crypto data, and business files from Macs. The post Mac Users Face New Malware Threat Spoofing Apple, Google, and Microsoft appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-reaper-shub-malware-mac-users/
-
Mac Users Face New Malware Threat Spoofing Apple, Google, and Microsoft
A new SHub Reaper macOS infostealer spoofs prompts from Apple, Google, and Microsoft to steal passwords, crypto data, and business files from Macs. The post Mac Users Face New Malware Threat Spoofing Apple, Google, and Microsoft appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-reaper-shub-malware-mac-users/
-
VoidStealer Malware Targets Chrome Data Despite Built-In Browser Protections
A newly discovered infostealer called VoidStealer is raising concerns after researchers revealed it can bypass Google Chrome’s App-Bound Encryption (ABE), a security feature designed to protect sensitive browser data. The malware introduces a novel technique that allows attackers to extract encryption keys directly from memory, enabling session hijacking and credential theft even on updated systems. VoidStealer Malware…
-
New macOS infostealer impersonates Apple, Microsoft, and Google in a single attack chain
A SHub macOS infostealer variant called Reaper impersonates Apple, Microsoft, and Google to trick users into executing malicious code, then targets browser data, password … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/05/19/shub-reaper-macos-infostealer-apple-google-microsoft/
-
macOS Malware Abuses Fake Google Update for Persistence
A newly observed variant of the SHub macOS infostealer, dubbed “Reaper,” is expanding its capabilities with stealthier delivery, enhanced data theft, and a persistence mechanism disguised as a legitimate Google software update. The Reaper variant continues SHub’s use of fake application installers, notably masquerading as WeChat and Miro downloads. However, its infection chain stands out…
-
YouTube Shopping-Falle: Impulskäufe per Fernbedienung
Tags: googleYouTube Shopping-Falle: Google macht Smart-TVs zur Verkaufsplattform. Produkte direkt per Fernbedienung kaufen ist perfekt für Impulskäufe. First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/entertainment/youtube-shopping-falle-smart-tv-google-pay-329208.html
-
Erster KI-generierte Zero-Day-Exploit sollte Weckruf für jede Organisation sein, die noch auf MFA setzt
Googles Entdeckung des ersten von KI generierten Zero-Day-Exploits markiert einen bedeutenden Zeitpunkt. Die Bedeutung dieses Fundes liegt nicht darin, dass die zugrundeliegende Technik eine völlig neue Idee ist. Vielmehr bestätigt er, dass KI von einem theoretischen Beschleuniger für Angriffe zu einem operativen Werkzeug geworden ist. Besonders alarmierend ist, dass der Exploit auf die Umgehung von…
-
The First AI-Crafted Zero-Day Was Easy to Spot. The Next One May Not Be
Google reported the first confirmed AI-assisted zero-day exploit, raising new concerns about logic flaws, supply chain risk, and containment. The post The First AI-Crafted Zero-Day Was Easy to Spot. The Next One May Not Be appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-google-ai-crafted-zero-day-exploit/
-
Google’s Default 15GB Free Storage Is Ending for Some New Accounts
Google is testing a change that gives some new accounts 5GB by default, with the full 15GB unlocked only after phone verification. The post Google’s Default 15GB Free Storage Is Ending for Some New Accounts appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-google-15gb-storage-phone-verification/
-
Google lets Workspace admins apply one policy across all SAML apps
Google has updated Context-Aware Access (CAA) in Google Workspace to introduce a default policy assignment for SAML applications. SAML applications are third-party or internal … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/05/15/google-workspace-caa-default-policy-saml-applications/
-
Google Project Zero Details Pixel 10 Zero-Click Exploit Chain
A powerful zero-click exploit chain for the Pixel 10 that can take an attacker from a remote Dolby decoding bug to full kernel control through a single vulnerable video processing driver. The work shows both how quickly Google can now patch critical issues and how shallow mistakes in vendor drivers can still undermine Android’s security…