Google links massive cloud outage to API management issue

Google says an API management issue is behind Thursday's massive Google Cloud outage, which disrupted or brought down its services and many other online platforms.

• Sergiu Gatlan
• June 13, 2025
• 01:39 PM
• 2

Google patched bug leaking phone numbers tied to accounts

A vulnerability allowed researchers to brute-force any Google account's recovery phone number simply by knowing a their profile name and an easily retrieved partial phone number, creating a massive risk for phishing and SIM-swapping attacks.

• Bill Toulas
• June 09, 2025
• 03:36 PM
• 0

New Webinar: Choose Your Own Investigation — Browser Attack Edition

Modern attacks have shifted focus to the browser, yet detection tools remain largely blind to the crucial activity happening there.

Join Push Security on February 11th for an interactive "choose-your-own-adventure" webinar on ClickFix, credential phishing, and other in-browser attacks we've observed in the wild.

• Push Security Sponsorship

Google’s upcoming Gemini Kingfall is allegedly a coding beast

Google's AI advancement is not slowing down, and we might be getting yet another powerful model codenamed "Gemini Kingfall."

• Mayank Parmar
• June 05, 2025
• 07:41 PM
• 2

Google patches new Chrome zero-day bug exploited in attacks

Google has released an emergency security update to fix the third Chrome zero-day vulnerability exploited in attacks since the start of the year.

• Sergiu Gatlan
• June 03, 2025
• 06:22 AM
• 3

Google Chrome to distrust Chunghwa Telecom, Netlock certificates in August

Google says it will no longer trust root CA certificates signed by Chunghwa Telecom and Netlock in the Chrome Root Store due to a pattern of compliance failures and failure to make improvements.

• Bill Toulas
• June 02, 2025
• 01:36 PM
• 0

Threat actors abuse Google Apps Script in evasive phishing attacks

Threat actors are abusing the trusted Google platform 'Google Apps Script' to host phishing pages, making them appear legitimate and eliminating the risk of them getting flagged by security tools.

• Bill Toulas
• May 29, 2025
• 12:25 PM
• 0

APT41 malware abuses Google Calendar for stealthy C2 communication

The Chinese APT41 hacking group uses a new malware named 'ToughProgress' that abuses Google Calendar for command-and-control (C2) operations, hiding malicious activity behind a trusted cloud service.

• Bill Toulas
• May 28, 2025
• 06:04 PM
• 0

Google claims users find ads in AI search 'helpful'

Google AI mode and AI Overviews now have ads, which, according to the search engine giant, are "helpful."

• Mayank Parmar
• May 26, 2025
• 08:45 AM
• 4

CISA tags recently patched Chrome bug as actively exploited

On Thursday, CISA warned U.S. federal agencies to secure their systems against ongoing attacks exploiting a high-severity vulnerability in the Chrome web browser.

• Sergiu Gatlan
• May 16, 2025
• 04:13 AM
• 0

Google fixes high severity Chrome flaw with public exploit

Google has released emergency security updates to patch a high-severity Chrome vulnerability that has a public exploit and can let attackers hijack accounts.

• Sergiu Gatlan
• May 15, 2025
• 04:25 AM
• 0

Google Chrome to block admin-level browser launches for better security

Google is rolling out a change to Chromium that "de-elevates" Google Chrome so it does not run as an administrator to increase security in Windows.

• Mayank Parmar
• May 14, 2025
• 04:25 PM
• 1

Hackers behind UK retail attacks now targeting US companies

Google warned today that hackers using Scattered Spider tactics against retail chains in the United Kingdom have also started targeting retailers in the United States.

• Sergiu Gatlan
• May 14, 2025
• 03:38 PM
• 0

Android 16 expands 'Advanced Protection' with device-level security

Google is announcing improvements for the Advanced Protection feature in Android 16 that strengthen defenses against sophisticated spyware attacks.

• Bill Toulas
• May 13, 2025
• 01:20 PM
• 3

Google to pay $1.375 billion to settle Texas data privacy violations

Google has agreed to a $1.375 billion settlement with the state of Texas over a 2022 lawsuit that alleged it had been collecting and using biometric data of millions of Texans without properly acquiring their consent.

• Bill Toulas
• May 12, 2025
• 11:02 AM
• 1

Google Chrome to use on-device AI to detect tech support scams

Google is implementing a new Chrome security feature that uses the built-in 'Gemini Nano' large-language model (LLM) to detect and block tech support scams while browsing the web.

• Bill Toulas
• May 09, 2025
• 01:49 PM
• 1

Google fixes actively exploited FreeType flaw on Android

Google has released the May 2025 security updates for Android with fixes for 45 security flaws, including an actively exploited zero-click FreeType 2 code execution vulnerability.

• Bill Toulas
• May 06, 2025
• 09:33 AM
• 0

Google NotebookLM is now using Gemini 2.5 Flash

Google NotebookLM, which is a research and note-taking AI tool, is getting upgraded to Gemini 2.5 Flash.

• Mayank Parmar
• May 03, 2025
• 05:21 PM
• 0

Google: 97 zero-days exploited in 2024, over 50% in spyware attacks

Google's Threat Intelligence Group (GTIG) says attackers exploited 75 zero-day vulnerabilities in the wild last year, over 50% of which were linked to spyware attacks.

• Sergiu Gatlan
• April 29, 2025
• 06:00 AM
• 0

Phishers abuse Google OAuth to spoof Google in DKIM replay attack

In a rather clever attack, hackers leveraged a weakness that allowed them to send a fake email that seemed delivered from Google's systems, passing all verifications but pointing to a fraudulent page that collected logins.

• Ionut Ilascu
• April 20, 2025
• 01:31 PM
• 3

Google Gemini AI is getting ChatGPT-like Scheduled Actions feature

Google Gemini is testing a ChatGPT-like scheduled tasks feature called "Scheduled Actions," which will allow you to create tasks that Gemini will execute later.

• Mayank Parmar
• April 19, 2025
• 08:01 AM
• 0