“Google”

Attackers could trigger dangerous actions on Google Gemini by poisoned notifications, enabling control over smart devices and calls.

A single code setting bypassed protections exposing billions of Microsoft Android app downloads; immediate review of token/access handling recommended.

Google Android patches address a exploited zero-day plus 123 other flaws; prioritize devices exposed to internet or corporate networks.

Chrome 148 patches 151 vulnerabilities, including critical RCE flaws. Urge immediate browser updates across endpoints.

Coordinated disruption of Glassworm infrastructure; assess supply-chain risk and harden package sources.

Active exploitation of zero-days and RCE in common software calls for tighter patch cadence.

Ransomware overlay amid 600+ manufacturing sector hits; highlights supply-chain risk and downtime impact.

Chrome 148 closes 127 vulnerabilities, including critical overflow and use-after-free flaws. Update immediately to reduce exploitation risk.

A maximum severity remote code execution flaw in the Gemini CLI and related GitHub Actions could allow attackers to run code on host systems. Apply patches immediately.

External tooling compromise allowed unauthorized access; assess third-party risk and tighten vendor controls.

Third-party AI tool context access enabled a breach; emphasize third-party risk, credential hygiene, and cloud access reviews.

A cluster of 108 malicious Chrome extensions communicates with a shared C2 to steal data and inject ads/JS on pages. Mitigation includes extension reviews and disabling suspicious add-ons.

A cluster of 108 malicious Chrome extensions communicates with a shared C2 to steal data and inject ads/JS on pages. Mitigation includes extension reviews and disabling suspicious add-ons.

Device-Bound Session Credentials (DBSC) became generally available for Chrome on Windows to prevent session hijacking. Update Chrome.

Device-Bound Session Credentials (DBSC) became generally available for Chrome on Windows to prevent session hijacking. Update Chrome.

Device-Bound Session Credentials (DBSC) became generally available for Chrome on Windows to prevent session hijacking. Update Chrome.

Device-Bound Session Credentials (DBSC) became generally available for Chrome on Windows to prevent session hijacking. Update Chrome.

Device-Bound Session Credentials (DBSC) became generally available for Chrome on Windows to prevent session hijacking. Update Chrome.