Data Breaches Google Discloses Data Breach via Salesforce Hack A Google Salesforce instance may have been targeted as part of a ShinyHunters campaign that hit several major companies. Eduard KovacsAugust 6, 2025
Malware & Threats Google Sues Operators of 10-Million-Device Badbox 2.0 Botnet Google has filed a lawsuit against the Badbox 2.0 botnet operators, after identifying over 10 million infected Android devices. Ionut ArghireJuly 18, 2025
Email Security Russian Hackers Bypass Gmail MFA With App-Specific Password Ruse Russian hackers posed as US State Department staff and convinced targets to generate and give up Google app-specific passwords. Ryan NaraineJune 18, 2025
Vulnerabilities Gerrit Misconfiguration Exposed Google Projects to Malicious Code Injection Misconfigured permissions in Google’s Gerrit code collaboration platform could have led to the compromise of ChromiumOS and other Google projects. Ionut ArghireJune 18, 2025
Cloud Security Google’s $32 Billion Wiz Deal Draws DOJ Antitrust Scrutiny: Report According to reports, the US Department of Justice will assess whether the deal would harm competition in the cybersecurity market. SecurityWeek NewsJune 16, 2025
Vulnerabilities Vulnerabilities Exposed Phone Number of Any Google User Google has awarded $5,000 to a researcher who found security holes that enabled brute-forcing the phone number of any user. Eduard KovacsJune 10, 2025
Data Protection Chrome to Distrust Chunghwa Telecom and Netlock Certificates Patterns of concerning behavior led Google to remove trust in certificates from Chunghwa Telecom and Netlock from Chrome. Ionut ArghireJune 2, 2025
Fraud & Identity Theft Firebase, Google Apps Script Abused in Fresh Phishing Campaigns Security researchers flag two phishing campaigns abusing Firebase and Google Apps Script to host malware and fake login pages. Ionut ArghireMay 30, 2025
Artificial Intelligence Google DeepMind Unveils Defense Against Indirect Prompt Injection Attacks Google DeepMind has developed an ongoing process to counter the continuously evolving threatIndirect prompt injection (IPI) attacks. Kevin TownsendMay 21, 2025
Malware & Threats Google Ships Android ‘Advanced Protection’ Mode to Thwart Surveillance Spyware Google bundles multiple safeguards under a single Android toggle to protect high-risk users from advanced mobile malware implants. Ryan NaraineMay 14, 2025
Privacy & Compliance Google Agrees to $1.3 Billion Settlement in Texas Privacy Lawsuits Google has agreed to a $1.375 billion settlement with Texas in lawsuits over location and private browsing tracking, and biometric data collection. Ionut ArghireMay 12, 2025
Malware & Threats Russia-Linked APT Star Blizzard Uses ClickFix to Deploy New LostKeys Malware, Google Warns Russia-linked APT Star Blizzard is using the ClickFix technique in recent attacks distributing the LostKeys malware. Ionut ArghireMay 8, 2025
Vulnerabilities Google Tracked 75 Zero-Days in 2024 The number of exploited zero-days seen by Google in 2024 dropped to 75, from 98 observed in the previous year. Eduard KovacsApril 29, 2025
Artificial Intelligence Google Targets SOC Overload With Automated AI Alert and Malware Analysis Tools Google plans to unleash automated AI agents into overtaxed SOCs to reduce the manual workload for cybersecurity investigators. Ryan NaraineApril 9, 2025
Artificial Intelligence Google Pushing ‘Sec-Gemini’ AI Model for Threat-Intel Workflows Experimental Sec-Gemini v1 touts a combination of Google’s Gemini LLM capabilities with real-time security data and tooling from Mandiant. Ryan NaraineApril 7, 2025
Artificial Intelligence Google DeepMind Unveils Framework to Exploit AI’s Cyber Weaknesses DeepMind found that current AI frameworks are ad hoc, not systematic, and fail to provide defenders with useful insights. Kevin TownsendApril 2, 2025
Email Security Google Brings End-to-End Encrypted Emails to All Enterprise Gmail Users Gmail now allows enterprise users to send end-to-end encrypted emails to colleagues, and will soon allow sending to any inbox. Ionut ArghireApril 2, 2025
Data Protection New Issuance Requirements Improve HTTPS Certificate Validation HTTPS certificate issuance now requires Multi-Perspective Issuance Corroboration and linting to improve validation. Ionut ArghireMarch 28, 2025
Cloud Security Industry Reactions to Google Buying Wiz: Feedback Friday Industry professionals comment on Google acquiring cloud security giant Wiz for $32 billion in cash. Eduard KovacsMarch 21, 2025
Cloud Security What’s Behind Google’s $32 Billion Wiz Acquisition? News analysis: Google positions itself to compete with Microsoft for enterprise security dollars. How does this deal affect startup ecosystem? Ryan NaraineMarch 19, 2025