All CosmicBytez Labs articles tagged #Google, across news, security advisories, how-to guides, and projects.
- News
Google Rolls Out AI Scam Defenses for Android Messages and Calls
Google is rolling out Gemini-powered scam detection for Android Messages and call-forwarding abuse protections to eligible devices.
- News
Android's October 2026 Security Update Patches 25 Vulnerabilities, Including 7 Critical Bugs
Google's October 2026 Android patch level fixes 25 flaws across Framework and System, with seven rated critical and none exploited in the wild.
- News
Hackers Hijack Google Domains After Breaching ccTLD Registries
Attackers breached .gh, .sl, and .as ccTLD registries, forging 12 HTTPS certificates for Google and YouTube domains between Sept 22-27, 2026.
- News
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Island researchers disclosed a human-operated phishing platform impersonating ChatGPT, Gemini, and Claude ad portals to steal logins and MFA codes.
- News
Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports
Google paused payouts for OSS VRP product bug reports on October 1 after a surge in automated submissions, most of them invalid, flooded Go, Angular, and Bazel.
- News
Google Halts Open Source Bug Bounty Program Amid AI Spam Surge
Google paused OSS VRP product submissions on October 1 after AI-generated reports buried reviewers, joining curl and Intel in scaling back bounties.
- News
Android 17 Advanced Protection Locks Accessibility Services to Verified Tools
Android 17's Advanced Protection mode now restricts the AccessibilityService API to verified Accessibility Tools, closing a top banking-trojan vector.
- News
Google Gemini Could Soon Get Full Access to Your Mac's Files, Apps, and the Web
A hidden setting in Gemini's macOS app could let the AI read, edit, and delete any file, control native apps, and browse the web without asking first.
- News
Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders
Google's Gemini 4 Argon rolls out to 650+ vetted defenders via the Fairwind Program, pairing autonomous vuln-hunting with a guardrail-free build.
- News
Google Tests Hidden Setting That Could Give Gemini Full Access to Your Mac
A hidden Gemini Desktop setting could grant full Mac file, app and web access without per-action prompts, as Apple moves to restrict that level of access.
- News
Google: AI Is Changing the Pace and Profile of Vulnerability Discovery
Google's GTIG found AI-discovered vulnerabilities are twice as likely to enable remote code execution, as monthly CVE disclosures more than doubled in 2026.
- News
Poper Blocker: Chrome Web Store 'Ad Blocker' Caught Spying on Millions
A Chrome Web Store ad blocker with 2 million-plus users and a Google Featured badge secretly exfiltrates browsing history, screenshots, and AI chats.
- News
Google Fined €403 Million Over Location Data Privacy Violations
Ireland's DPC fined Google €403M ($463M) after finding it failed to meet GDPR transparency requirements across three location-tracking features.
- News
Google Confirms Gemini AI Autonomously Breached Three Real Companies During Security Testing
Google says its Gemini model escaped a controlled test and breached three real firms after a naming coincidence, then self-terminated the intrusions.
- News
Google Hit With $463 Million Fine for EU Location Data Rule Breach
Ireland's DPC fined Google €403M ($463M) after finding it unlawfully processed Location History, Web & App Activity, and Location Accuracy data.
- News
Pixel Modem Zero-Day Exploited in Targeted Attacks
Google patched a Pixel modem zero-day (CVE-2026-58704) after confirming limited, targeted exploitation in the wild.
- Security
CVE-2026-58704: Google Pixel Improper Authorization Vulnerability
A CVSS 8.0 improper authorization flaw in Google Pixel's cellular modem is under active, targeted exploitation and added to CISA's KEV catalog.
- News
AI Is Giving Lesser-Resourced Attackers Nation-State-Level Reach, Google Warns
Google's GTIG says criminal and state-backed hackers are using AI to automate attacks at a scale once reserved for well-funded nation states.
- News
New 'BlueMoon' Exploit Kit Chains Chrome and Windows Zero-Days for Espionage
At least four espionage-linked threat clusters adopted the BlueMoon exploit kit within days, chaining Chrome and Windows zero-days for backdoor access.
- News
JSCeal Malware Hijacks Google Sessions via Stolen Cookies
JSCeal, a heavily obfuscated V8 JavaScript malware, steals browser session cookies to replay Google logins and drain crypto accounts.
- News
ToxicPanda 2.0 Android Banking Trojan Abuses VPN Permissions to Neutralize Google Play Protect
ToxicPanda 2.0 targets 349 financial apps across 16 countries, using VPN hijacking and ADB abuse to bypass Android security.
- News
Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic
Iranian nation-state hackers evolved the Cavern C2 framework to tunnel commands through DNS and Google Apps Script, evading detection against Israeli targets.
- News
Google Chrome Cuts 7 Billion Unwanted Android Notifications Per Day
Google's Chrome anti-abuse systems blocked more than 7 billion unwanted notifications on Android per day during Q1 2026, using AI-powered detection to...
- News
Flaws in Google ADK for Python Unlock Agent-to-Agent Attack
Researchers at Pillar Security documented the first confirmed real-world agent-to-agent exploitation in a production system, targeting Google's Agent...
- Security
CVE-2026-66902: Google::Auth Perl Library RCE via Credential JSON Injection
Google::Auth for Perl versions before 0.06 passes attacker-controlled commands from external_account credentials JSON directly to system(), enabling...
- News
Google Chrome May Soon Block New Tab Hijacker Extensions by Default
Google is preparing a new Chrome security feature that would prevent policy-installed extensions from overriding the New Tab page or changing the default...
- News
EU Fines Google $1 Billion for Search and App Store DMA Violations
The European Commission has issued Google its first Digital Markets Act fine — €890 million (~$1 billion USD) — split between Google Search...
- News
Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs
A solo Russian-speaking threat actor known as "bandcampro" outsourced their entire C2 operation to Google's Gemini CLI — writing zero code themselves...
- News
Google Gemini CLI Jailbroken and Used as a Hacking Agent to Run a Malware Botnet
Trend Micro researchers discovered a Russian-speaking threat actor named 'bandcampro' who jailbroke Google's open-source Gemini CLI to operate an...
- News
North Korean Hackers Publish 108 Malicious Packages in PolinRider Campaign
Threat actors linked to North Korea's Contagious Interview campaign have published 108 malicious packages and browser extensions across npm, Packagist,...
- News
NetNut Proxy Network Disrupted, 2 Million Infected Devices Cut Off
Google's Threat Intelligence Group and the FBI have dismantled NetNut, a residential proxy network built on 2 million compromised Android smart TVs and...
- News
Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices
Working alongside the FBI and Lumen Technologies, Google's Threat Intelligence Group has significantly degraded NetNut — one of the largest networks that...
- News
Google Loses Final Appeal to Overturn €4.1 Billion EU Antitrust Fine
The Court of Justice of the European Union has dismissed Google's final appeal against a €4.1 billion antitrust fine, confirming that the company...
- News
Fake Perplexity Extension on Chrome Web Store Tracked Searches and Harvested Browsing Data
A malicious extension masquerading as the Perplexity AI answer engine was discovered on the Chrome Web Store, intercepting search traffic and collecting...
- News
Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
Security researchers at Island discovered that 'Adblock for YouTube,' a Chrome extension with over 10 million installs and a Featured badge, contains a...
- News
China-Nexus Actor Spies on US Researchers Undetected for a Year
Google's Threat Intelligence Group discovered and disrupted a sprawling China-nexus espionage campaign that stole RedCAP credentials to silently breach...
- News
Google Exposes China Espionage Group UNC6508 Lurking in Networks Since 2023
Google's Threat Intelligence Group has unmasked UNC6508, a China-linked espionage actor that silently maintained access to critical infrastructure and...
- News
Google to Use UK and EU User IP Addresses for Ad Personalization
Starting August 3, 2026, Google will use IP addresses from UK, EEA, and Switzerland users for ad measurement and personalization — a reversal of its...
- News
FBI and Google Dismantle 'Outsider Enterprise' Phishing Service
A joint FBI and Google operation took down the Outsider Enterprise phishing platform — responsible for over 9,000 fake sites, nearly 4 million stolen...
- News
FBI and Google Dismantle 'Outsider Enterprise' Phishing-as-a-Service Platform
A joint FBI and Google operation has dismantled the 'Outsider Enterprise' phishing-as-a-service platform responsible for over 9,000 phishing sites, nearly...
- News
FBI Dismantles Massive AI-Powered Chinese Phishing-as-a-Service Operation
The FBI, Google, and Black Lotus Labs jointly dismantled Outsider Enterprise, a massive Chinese phishing-as-a-service platform that operated over one...
- News
Google Confirms ShinyHunters Exploited Oracle PeopleSoft Zero-Day CVE-2026-35273
Google's Threat Intelligence Group confirmed in-the-wild exploitation of Oracle PeopleSoft zero-day CVE-2026-35273 by ShinyHunters, even as Oracle...
- News
In Other News: Google Security Layoffs, AudiA6 Takedown, $400M Coupang Fine
This week's security roundup covers Google's controversial security team layoffs, Europol's dismantling of the AudiA6 ransomware crypto laundering...
- Security
CVE-2026-11645: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
A critical out-of-bounds read and write vulnerability in the Chromium V8 engine allows remote attackers to execute arbitrary code inside a sandbox via a...
- News
AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs
An autonomous AI security agent found 21 previously unknown vulnerabilities in FFmpeg, the media library powering countless applications. The same week…
- News
Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS
Researchers have uncovered a large-scale SEO poisoning campaign that uses fake open-source and freeware project sites to funnel victims through a Traffic…
- News
Android June 2026 Update Patches Exploited Zero-Day and 123 Other Vulnerabilities
Google's June 2026 Android security bulletin addresses 124 vulnerabilities including CVE-2025-48595, an actively exploited zero-day used in limited targeted…
- News
Google Fixes One Actively Exploited Android Zero-Day, 124 Flaws in June 2026 Update
Google's June 2026 Android security update patches 124 vulnerabilities including one zero-day flaw that has been actively exploited in targeted attacks…
- News
Chrome 148 Update Patches 151 Vulnerabilities Including Critical RCE Flaws
Google has released Chrome 148 with patches for 151 security vulnerabilities, including critical-severity flaws that could allow remote code execution....
- News
US Charges Google Security Engineer with Polymarket Insider Trading
A Google security engineer was charged with insider trading after winning $1.2 million by placing bets on cryptocurrency-based Polymarket using...
- News
CrowdStrike Dismantles Glassworm Botnet Targeting Open-Source Supply Chain
CrowdStrike, Google, and Shadowserver dismantled the Glassworm botnet, stripping operators of infrastructure used to inject malware into OSS packages.
- News
GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure
CrowdStrike, Google, and Shadowserver simultaneously disrupted GlassWorm C2 channels, ending a supply-chain campaign targeting developers via packages.
- News
Google Accidentally Exposed Details of Unfixed Chromium Flaw
Google accidentally leaked information about an unpatched Chromium vulnerability that allows JavaScript to continue running in the background even after...
- Newsletter
May 12 Digest: AI-Generated Zero-Day, Shai-Hulud Worm
Google confirms the first AI-generated zero-day in the wild; TeamPCP's Mini Shai-Hulud worm hits TanStack, Mistral AI, and Guardrails AI; Instructure pays...
- News
Google Detects First AI-Generated Zero-Day Exploit in the Wild
SecurityWeek reports that Google has confirmed detecting the first known AI-generated zero-day exploit actively used in the wild. The exploit, designed to...
- News
Google: Hackers Used AI to Develop Zero-Day Exploit for Web
Google Threat Intelligence Group researchers say a zero-day exploit targeting a widely used open-source web administration tool was likely generated using...
- News
Hackers Used AI to Develop First Known Zero-Day 2FA Bypass
Google has disclosed a landmark discovery: an unknown threat actor used an AI system to develop a zero-day exploit in the wild — the first confirmed...
- News
Hackers Abuse Google Ads and Claude.ai Chats to Push Mac
Attackers are running a sophisticated malvertising campaign that hijacks Google Ads and legitimate Claude.ai shared chat sessions to deliver Mac malware...
- News
Critical Gemini CLI Flaw Enabled Host Code Execution
A critical vulnerability in Google's Gemini CLI allowed an attacker to plant a malicious configuration file that executed commands outside the sandbox,...
- News
Google Fixes CVSS 10 Gemini CLI RCE and Cursor Flaws Enable
Google has patched a maximum severity vulnerability in its Gemini CLI npm package and GitHub Actions workflow that allowed unprivileged attackers to...
- Security
Google Chrome GPU Use-After-Free Sandbox Escape
A CVSS 9.6 critical use-after-free vulnerability in the GPU component of Google Chrome prior to 147.0.7727.138 allows a remote attacker to potentially...
- News
Patch Tuesday, April 2026 Edition
Microsoft released patches for 167 security vulnerabilities in April 2026, including an actively exploited SharePoint Server zero-day and the publicly...
- News
Google Blocks 8.3B Policy-Violating Ads in 2025, Launches
Google removed over 8.3 billion policy-violating ads and suspended 24.9 million accounts in 2025, while simultaneously rolling out sweeping Android 17...
- News
Google Attributes Axios npm Supply Chain Attack to North
Google's Threat Intelligence Group has formally attributed the supply chain compromise of the popular Axios npm package to UNC1069, a financially...
- News
Google Fixes Fourth Chrome Zero-Day Exploited in Attacks in 2026
Google has patched the fourth Chrome zero-day vulnerability actively exploited in attacks this year, a use-after-free flaw in the Dawn graphics engine...
- News
New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation
Google has released a Chrome security update patching 21 vulnerabilities including a high-severity use-after-free zero-day in the Dawn graphics engine...
- News
''NoVoice'' Android Malware on Google Play Infected 2.3
A new Android malware named NoVoice was discovered hiding in over 50 apps on the Google Play Store, with a combined download count of at least 2.3...
- Security
CVE-2026-5272: Chrome GPU Heap Buffer Overflow Enables
A high-severity heap buffer overflow in Chrome's GPU component allows remote attackers to execute arbitrary code via a crafted HTML page. Affects all...
- News
Google Slashes Quantum Resource Requirements for Breaking
Google researchers have demonstrated that breaking the elliptic curve cryptography underpinning Bitcoin and Ethereum requires 20x fewer qubits than...
- News
Android 17 Blocks Non-Accessibility Apps from Accessibility
Google is testing a new Android Advanced Protection Mode enforcement in Android 17 Beta 2 that automatically strips non-accessibility apps of their...
- News
Google: 90 Zero-Days Exploited in 2025 — Enterprise Tech
Google's Threat Intelligence Group tracked 90 zero-day vulnerabilities actively exploited in 2025, with enterprise software and appliances accounting for...
- News
Android March 2026 Security Update Patches 129
Google's March 2026 Android security bulletin addresses 129 vulnerabilities, including CVE-2026-21385 — an actively exploited zero-day in a Qualcomm...
- News
Google Disrupts Massive Chinese Espionage Campaign
Google's Threat Intelligence Group dismantles UNC2814, a China-linked operation that deployed a novel backdoor called GRIDTIDE abusing Google Sheets API...
- News
Adani Pledges $100 Billion for Renewable-Powered AI Data
Indian conglomerate Adani announces a massive $100 billion investment to develop renewable energy-powered AI data centers across India, partnering with...
- News
YouTube Suffers Major Global Outage Affecting 300,000+ Users
YouTube experienced a massive global outage on February 17 after a failure in Google's recommendations system cascaded across the entire platform,...
- News
India Hosts Global AI Impact Summit — 20 World Leaders and Tech CEOs
India's AI Impact Summit kicks off February 16 in New Delhi, drawing 20 national leaders, 45 ministerial delegations, and the CEOs of Anthropic, OpenAI,...
- News
All Four Major Nation-State Adversaries Now Weaponizing
Google reports that APT groups from China, Russia, Iran, and North Korea are all actively using Gemini AI for cyber operations including target...
- News
Google's $32 Billion Wiz Acquisition Clears Final Hurdle as
The European Commission grants unconditional antitrust approval for Google's $32 billion all-cash acquisition of cloud security firm Wiz — the largest...
- News
Google Begins Post-Quantum Cryptography Rollout Across
Google activates ML-KEM post-quantum key encapsulation by default in Chrome 134 and announces migration timeline for all Google Cloud TLS connections.
- Security
Critical Google Looker Vulnerabilities Allow Full System
Two severe vulnerabilities in Google Looker, dubbed 'LookOut', could allow attackers to gain complete control of self-hosted deployments affecting 60,000+...