Tag: google
-
Bug-Bounty-Programm: Zu viele falsche KI-Meldungen für Google
Viele automatisierte Fehlermeldungen sind unbrauchbar. Google nimmt deshalb vorerst keine neuen Open-Source-Berichte mehr an. First seen on golem.de Jump to article: www.golem.de/news/ungueltige-ki-einreichungen-google-stoppt-bug-bounty-programm-fuer-open-source-2610-213721.html
-
Bug-Bounty-Programm: Zu viele falsche KI-Meldungen für Google
Viele automatisierte Fehlermeldungen sind unbrauchbar. Google nimmt deshalb vorerst keine neuen Open-Source-Berichte mehr an. First seen on golem.de Jump to article: www.golem.de/news/ungueltige-ki-einreichungen-google-stoppt-bug-bounty-programm-fuer-open-source-2610-213721.html
-
Cling Botnet Spoofs Google STUN Traffic to Hide Commands Sent to Infected IoT Devices
Cling, an IoT botnet that disguises operator commands as Google STUN replies, blending malicious communications into routine NAT traversal traffic. Published October 1, the research documents exploitation of exposed networking devices and a command channel designed to exploit trust in familiar infrastructure. Researchers discovered the malware while investigating increased exploitation of CVE-2021-35394, a remote code…
-
Android 17 Advanced Protection Adds Intrusion Logging, USB Security and Brute-Force Defense
Google has expanded Android Advanced Protection with six security enhancements targeting spyware investigations, malicious USB connections, accessibility abuse, browser exploits, and repeated authentication failures. Announced on October 1, 2026, the update strengthens Android 17 defenses for journalists, officials, public figures, and security-conscious users. The changes build on Android 16’s device-level Advanced Protection, introduced in May…
-
Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports
Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software.The change, in effect since October 1, means researchers can no longer submit security flaws in the code of projects such as Go, Angular, and Protocol Buffers there for a reward. Reports about supply chain compromises are still accepted, and…
-
Nikkei discloses breaches of employees’ Microsoft, Google email accounts
Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts and used one to send thousands of phishing emails. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/nikkei-discloses-breaches-of-employees-microsoft-google-email-accounts/
-
Android-Patchday: Google stopft sieben kritische Löcher
Mindestens zwei Anfälligkeiten lassen sich ohne Interaktion mit einem Anwender ausnutzen. Sie erlauben Denial-of-Service und eine Rechteausweitung. First seen on golem.de Jump to article: www.golem.de/news/android-patchday-google-stopft-sieben-kritische-loecher-2610-213746.html
-
Vulnerability in agents from Google and others exposes structural flaw in MCP
Trust gaps in the new protocol spread malicious prompts from one agent to another. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/10/vulnerability-in-agents-from-google-and-others-exposes-structural-flaw-in-mcp/
-
Vulnerability in agents from Google and others exposes structural flaw in MCP
Trust gaps in the new protocol spread malicious prompts from one agent to another. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/10/vulnerability-in-agents-from-google-and-others-exposes-structural-flaw-in-mcp/
-
Vulnerability in agents from Google and others exposes structural flaw in MCP
Trust gaps in the new protocol spread malicious prompts from one agent to another. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/10/vulnerability-in-agents-from-google-and-others-exposes-structural-flaw-in-mcp/
-
Vulnerability in agents from Google and others exposes structural flaw in MCP
Trust gaps in the new protocol spread malicious prompts from one agent to another. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/10/vulnerability-in-agents-from-google-and-others-exposes-structural-flaw-in-mcp/
-
Vulnerability in agents from Google and others exposes structural flaw in MCP
Trust gaps in the new protocol spread malicious prompts from one agent to another. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/10/vulnerability-in-agents-from-google-and-others-exposes-structural-flaw-in-mcp/
-
Ungültige KI-Einreichungen: Google stoppt Bug-Bounty-Programm für Open Source
Die überwiegende Mehrheit der automatisiert eingereichten Fehlermeldungen ist ungültig. Google überarbeitet nun seine Regeln für KI-basierte Einreichungen. First seen on golem.de Jump to article: www.golem.de/news/ungueltige-ki-einreichungen-google-stoppt-bug-bounty-programm-fuer-open-source-2610-213721.html
-
Google Gemini to Gain Full Computer Access With New Permission
Google is reportedly testing a new Gemini Desktop feature that could give its AI agent extensive control over a user’s Mac. This includes access to files, interaction with installed applications, and network communication, all with fewer prompts requiring user approval for each action. Currently, Google has not publicly released this capability, and it has not…
-
Google Tightens Open-Source Bug Bounty Rules After Surge in AI-Generated Vulnerability Reports
Google has stopped accepting new >>product vulnerability<< reports through its Open Source Software Vulnerability Reward Program (OSS VRP) due to a significant increase in automated submissions that are predominantly invalid. This restriction took effect on October 1, 2026, and Google plans to provide an update regarding this part of the program in the first quarter…
-
Google Suspends Open-Source Bug Bounty Due to AI Vulnerability Reports
Google has paused its Open Source Vulnerability Rewards Program due to a flood of AI submissions First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/google-suspends-opensource-bug/
-
Google Suspends Open Source Bug Bounty Over AI-Generated Reports
Google has suspended its Open Source Software Vulnerability Rewards Program (OSS VRP), a vulnerability search initiative that paid researchers for finding flaws in the company’s open-source software. The pause took effect on October 1, 2026. Google blamed a “significant rise” in automated and AI-generated reports, most of which turned out to be invalid. First seen…
-
AI slop submissions force Google to freeze its open-source bug bounty
Google has stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP), after a wave of invalid, AI-generated … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/05/google-ai-generated-vulnerability-reports-pause/
-
Google halts open-source bug bounty program amid AI spam surge
Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/google/google-halts-open-source-bug-bounty-program-amid-ai-spam-surge/
-
Google PageBreak AI Agent Finds Over 500 XSS Vulnerabilities Across Its Web Applications
Google has disclosed that PageBreak, an internal AI security agent developed by its Product Security team, has identified and validated more than 500 cross-site scripting (XSS) vulnerabilities across the company’s first-party web applications, including sensitive domains. The initiative highlights a shift from AI-assisted vulnerability triage to agentic testing that produces exploit-backed findings rather than noisy…
-
Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions
AI slop seems to be overwhelming bug bounty programs. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/04/google-froze-its-open-source-bug-bounty-program-due-to-a-significant-rise-in-ai-submissions/
-
‘They call every week’: the phishing attacks targeting past victims
Scammers reuse personal details harvested from fake Esta websites and texts and calls can keep arriving for monthsWhen the British actor Lisa Riley was preparing to travel to the US last year, she applied online for an Esta so she would not need a visa. After finding the site through a Google search she filled…
-
Google Gemini could soon get full access to your Mac’s files, apps and the web
Google’s Gemini could soon access any file on your macOS device, open apps, browse the web, and perform actions without asking for permission every time. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/google/google-gemini-could-soon-get-full-access-to-your-macs-files-apps-and-the-web/
-
Cling Malware Masquerades as Google STUN Traffic to Control Compromised IoT Devices
A newly identified IoT botnet, Cling, disguises its command-and-control communications as legitimate STUN traffic, including packets that appear to originate from Google’s public STUN infrastructure. The technique enables attackers to manage compromised internet-facing devices while blending activity into routine NAT-traversal traffic used by real-time communications platforms. Nozomi Networks Labs discovered the campaign while investigating a…
-
Souveräne Cloud Datenhoheit, Betrieb, Schlüssel und Rechtsraum prüfbar machen
Eine souveräne Cloud ist eine Cloud-Umgebung, in der eine Organisation selbst bestimmt, wo ihre Daten liegen, wer die Systeme betreibt, wer die Schlüssel hält und welches Recht im Konfliktfall gilt. AWS, Microsoft, Google, SAP und europäische Anbieter vermarkten inzwischen eigene Dienste als ‘Sovereign Cloud>>. Für IT-Leiter und CISOs sagt das Etikett wenig. Entscheidend ist, welche…
-
Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools
Google has announced a new security measure that limits access to Android’s accessibility services to verified applications classified as Accessibility Tools when Advanced Protection is enabled.With malicious Android applications abusing the API serving as the main conduit for malware and financial fraud, the tech giant said the move would block a major attack pathway. Advanced…
-
Android 17 makes it harder for spyware to cover its tracks
When a journalist suspects their phone has been hacked, the first question is whether any trace of the attack is left. Google has added six features to Advanced Protection in … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/02/android-17-advanced-protection-features/
-
Google Enters Cyber AI Race With Gemini 4 Argon
Phased Rollout Gives Trusted Defenders Unrestricted Access to Google’s Most Capable Cyber Model. Google has been seen as lagging behind the frontier AI model race as its competitors release cyber-capable models. The company followed Anthropic and OpenAI’s example with a phased rollout of Gemini 4. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/google-enters-cyber-ai-race-gemini-4-argon-a-33003
-
Inside Gemini 4 Argon, the model Google is testing on its own infrastructure first
Google unveils Gemini 4 Argon, a frontier AI model built for coding, enterprise work, and autonomous cybersecurity defense, rolling out to trusted testers. Google announced Gemini 4 Argon, and it’s not going straight to the public. It’s rolling out first to a set of trusted cyber defenders through what Google calls the Fairwind Program, which…
-
Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version
Google on Wednesday announced its latest frontier artificial intelligence (AI) model, Gemini 4 Argon, that it said is being rolled out to a set of trusted cyber defenders through its Fairwind Program.”It delivers frontier performance in complex workflows across real-world software engineering, enterprise knowledge work like legal and finance, and cybersecurity defense,” Koray Kavukcuoglu, First…