Google Detects First AI-Generated Zero-Day Exploit 2026-05-11 at 16:48 By Eduard Kovacs The zero-day was designed to bypass 2FA and it was developed by a prominent cybercrime group. The post Google Detects First AI-Generated Zero-Day Exploit appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Google Detects First AI-Generated Zero-Day Exploit Read More »
Google is turning Android Studio into a policy watchdog 2026-05-08 at 13:09 By Anamarija Pogorelec Google has expanded Play Policy Insights in Android Studio to help developers catch policy issues while coding, including warnings for common problems such as missing login credentials. Later this year, developers who connect their Play developer account directly to Android
Google is turning Android Studio into a policy watchdog Read More »
One keypress is all it takes to compromise four AI coding tools 2026-05-08 at 01:14 By Mirko Zorz Developers clone unfamiliar repositories all the time. Open-source projects, work from teammates, sample code from a tutorial, a library someone recommended on a forum. The convention is old and reasonable: you look at what’s inside before you
One keypress is all it takes to compromise four AI coding tools Read More »
Google to pay up to $1.5 million for zero-click Pixel Titan M exploits 2026-05-05 at 17:29 By Anamarija Pogorelec Google has revised its Android and Chrome Vulnerability Reward Programs (VRPs), which pay security researchers to report vulnerabilities in Android, Google hardware, and the Chrome browser. The update raises top bounties to $1.5 million and adjusts
Google to pay up to $1.5 million for zero-click Pixel Titan M exploits Read More »
Google Adjusts Bug Bounties: Chrome Payouts Drop as Android Rewards Rise Amid AI Surge 2026-05-01 at 18:20 By Eduard Kovacs The maximum reward for a zero-click Pixel Titan M exploit with persistence has increased to $1.5 million. The post Google Adjusts Bug Bounties: Chrome Payouts Drop as Android Rewards Rise Amid AI Surge appeared first
Google Adjusts Bug Bounties: Chrome Payouts Drop as Android Rewards Rise Amid AI Surge Read More »
FIDO Alliance wants to keep AI agents from going rogue on online payments 2026-04-29 at 05:30 By Sinisa Markovic AI agents are beginning to shop, log in, and complete tasks with little direct input. That shift is pushing the security industry to rethink how trust works when actions are carried out on a user’s behalf.
FIDO Alliance wants to keep AI agents from going rogue on online payments Read More »
Indirect prompt injection is taking hold in the wild 2026-04-24 at 23:26 By Zeljka Zorz The open web is slowly but surely filling up with “traps” designed for LLM-powered AI agents. The technique, known as indirect prompt injection (IPI), involves hiding (more or less) covert instructions inside ordinary web pages, waiting for an AI agent
Indirect prompt injection is taking hold in the wild Read More »
Google brings instant email verification to Android, no OTP needed 2026-04-23 at 15:10 By Anamarija Pogorelec Google has introduced cryptographically verified email credentials for Android through the Credential Manager API. This API aligns with the W3C Digital Credential API standard. It provides a unified way for apps to request and retrieve user credentials for authentication
Google brings instant email verification to Android, no OTP needed Read More »
Google’s Workspace Intelligence promises privacy while running on your data 2026-04-22 at 23:27 By Sinisa Markovic Security and data governance are among the key considerations in Google’s latest AI update, which introduces Workspace Intelligence within Google Workspace. Google describes the feature as “a secure, dynamic system that inherently understands complex semantic relationships within your Workspace
Google’s Workspace Intelligence promises privacy while running on your data Read More »
Google wipes out 602 million scam ads with Gemini on duty 2026-04-17 at 13:59 By Sinisa Markovic Google claims that its security teams work around the clock using its Gemini AI models to detect and stop harmful ads. “Bad actors are using generative AI to create deceptive ads at scale, and Gemini helps us detect
Google wipes out 602 million scam ads with Gemini on duty Read More »
Android 17 Beta 4 arrives with post-quantum cryptography and new memory limits 2026-04-17 at 09:24 By Sinisa Markovic Google shipped Android 17 Beta 4 on April 16, marking the last scheduled beta in the Android 17 release cycle. The build targets app compatibility testing and platform stability ahead of the final release, and it carries
Android 17 Beta 4 arrives with post-quantum cryptography and new memory limits Read More »
Google Play is changing how Android apps access your contacts and location 2026-04-16 at 15:03 By Anamarija Pogorelec Google’s new set of Google Play policy updates and account transfer feature strengthen user privacy and protect businesses from fraud. Google is also expanding features for managing new contact and location policy changes to support a smoother,
Google Play is changing how Android apps access your contacts and location Read More »
Google to penalize sites that hijack the back button 2026-04-14 at 13:32 By Anamarija Pogorelec Google is broadening its spam policies to crack down on “back button hijacking,” a deceptive practice where websites interfere with browser navigation, blocking users from returning to the page they came from. Instead, users are usually redirected to pages they
Google to penalize sites that hijack the back button Read More »
Google Adds Rust DNS Parser to Pixel Phones for Better Security 2026-04-14 at 13:32 By Ionut Arghire The parser is meant to mitigate the entire class of memory safety bugs in the low-level environment. The post Google Adds Rust DNS Parser to Pixel Phones for Better Security appeared first on SecurityWeek. This article is an
Google Adds Rust DNS Parser to Pixel Phones for Better Security Read More »
Google makes it harder to exploit Pixel 10 modem firmware 2026-04-13 at 15:44 By Sinisa Markovic Google is working to improve the security of Pixel phones by focusing on the cellular baseband modem, a part of the device that handles communication with mobile networks and processes external data. In the Pixel 9, the company introduced
Google makes it harder to exploit Pixel 10 modem firmware Read More »
Gmail Brings End-to-End Encryption to Android and iOS for Enterprise Users 2026-04-13 at 13:22 By Ionut Arghire The feature allows enterprise users to compose and read end-to-end encrypted messages natively on their mobile devices. The post Gmail Brings End-to-End Encryption to Android and iOS for Enterprise Users appeared first on SecurityWeek. This article is an
Gmail Brings End-to-End Encryption to Android and iOS for Enterprise Users Read More »
Gmail’s end-to-end encryption comes to mobile, no extra apps required 2026-04-10 at 14:45 By Anamarija Pogorelec Google has expanded Gmail client-side encryption to Android and iOS devices, allowing users to engage with their organization’s most sensitive data on mobile devices while ensuring data remains compliant with sovereignty and compliance requirements. This feature is available for
Gmail’s end-to-end encryption comes to mobile, no extra apps required Read More »
Google Rolls Out Cookie Theft Protections in Chrome 2026-04-10 at 11:06 By Ionut Arghire New Device Bound Session Credentials render stolen session cookies unusable by cryptographically binding authentication. The post Google Rolls Out Cookie Theft Protections in Chrome appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Google Rolls Out Cookie Theft Protections in Chrome Read More »
April 2026 Patch Tuesday forecast: Spring-cleaning of a preview 2026-04-10 at 10:37 By Help Net Security I just blinked and the first quarter of the year is GONE. Where does the time go? I looked back at my article from last month where I touched on the use of AI and some of the vulnerabilities
April 2026 Patch Tuesday forecast: Spring-cleaning of a preview Read More »
Google API Keys in Android Apps Expose Gemini Endpoints to Unauthorized Access 2026-04-09 at 15:44 By Ionut Arghire Dozens of such keys can be extracted from apps’ decompiled code to gain access to all Gemini endpoints. The post Google API Keys in Android Apps Expose Gemini Endpoints to Unauthorized Access appeared first on SecurityWeek. This
Google API Keys in Android Apps Expose Gemini Endpoints to Unauthorized Access Read More »