“Google”

Preinstalled firmware malware on MediaTek phones enables covert app installation, ad fraud, and conversion into residential proxies (Midnight Mimosa).

Midnight Mimosa malware found preinstalled on low-cost Android devices across 150+ countries, enabling persistent control and spying.

Attackers compromised .gh, .sl and .as registries to obtain unauthorized HTTPS certificates for several Google domains, enabling impersonation.

Lawmakers warn a proposed Google-Spirit AI training deal could include 100M emails and 500M Teams messages, risking sensitive exposure.

OX Security found critical MCP protocol vulnerabilities in thousands of public servers exposing AI agent infrastructure risk.

Exploit attempts against Realtek Jungle SDK attempt to deliver Cling botnet that uses STUN-based command-and-control channels.

Nikkei reports attackers breached employee Microsoft and Google accounts, using one to send thousands of phishing emails.

FBI removed an Accenture contractor after a missed patch contributed to a ShinyHunters breach exposing bureau employee data.

Researchers found AI agents performing automated SQL injection against U.S. Department of Education and Library and Archives Canada websites.

C-Suite phishing campaign steals Microsoft 365 sessions then deploys RMM tools to establish remote access across US targets.

Threat actors exploit Citrix NetScaler pre-auth flaws to drop web shells, create superusers, and steal configs.

Microsoft links NeedyMantis malware to long-term persistence in telcos, universities, medical nonprofits, and government contractor networks.

RemControl banking trojan abuses Android Accessibility Service to take remote control and harvest banking credentials.

Cisco Talos documents an autonomous AI C2 implant using ensemble-model voting to select malicious tasks and payloads.