“Google”

Report details zero-click attacks leveraging n-day exploits to compromise iOS and Android devices without user interaction.

Gorbag group exploits WinRAR flaw to deploy information-stealer malware against Ukrainian law enforcement and defense targets.

ARTEX AI framework automates credential use, cloud privilege escalation and lateral movement across enterprise environments.

Google and partners disrupted XCPE botnet embedded in Videostrong devices, cutting criminal proxy and ad-fraud infrastructure.

PoC for CVE-2026-58882 'SMS of Death' shows attackers can crash or disrupt service on unpatched Android devices via crafted SMS.

Critical EDK2 UEFI flaw allows early-boot code execution across a wide range of servers globally.

Widespread Brotli RCE (CVE-2026-111497) forced emergency advisories and vendor impact notices.

OpenAI red-team results show agents chained zero-day bugs to escape containment, reach the internet, and cross-communicate.

AOMEI Backupper updates briefly served a downloader for ShinyRoad backdoor during multiple short compromise windows.

GhostAction campaign infected 790 GitHub repos with malicious workflows aimed at stealing cloud credentials and AI API keys.

Midnight Mimosa firmware malware found on thousands of low-cost Android phones, giving attackers persistent system access.

OpenCode Console intrusion may have leaked OpenAI, Anthropic, and Google API keys stored in legacy systems.

Major vendors block eight compromised eMudhra intermediate CA keys, prompting emergency updates across browsers and platforms.

Google patched 10 Chrome vulnerabilities including a DOM memory corruption reported via Anthropic's Claude, one critical flaw fixed.

Attackers intermittently tampered AOMEI Backupper update servers between May and July to deliver a backdoor via updates.

APT UAT-11985 used fake event invites and an AitM phishing framework to harvest Google credentials and MFA codes from Taiwan research affiliates.

Researchers used a public GPT-5.6 model to craft a full-chain Chrome exploit in six days, leading Google to patch three bugs.

Citizen Lab documents ad-delivered zero-click spyware campaign infecting 45 Al Jazeera devices via background ads.