https://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving Google.Sun, 26 Jul 2026 22:32:51 GMThttps://cloud.google.com/blog/topics/threat-intelligence/updated-cyber-threat-actor-naming-systemcst-3186Google Threat Intelligence Group is launching a new cryptonym-based naming system for tracking threat actors, replacing the separate schemas previously maintained by Mandiant and Google's Threat Analysis Group. The system uses memorable two-word combinations where the first word identifies the actor and the second word indicates its origin, type, or motivation, with categories assigned to countries and cybercriminal groups. Google will rename several dozen active groups initially and continue on a rolling basis, preserving legacy names and mappings for cross-reference.Fri, 24 Jul 2026 14:00:00 GMThttps://helpnetsecurity.com/2026/07/24/google-codemender-ai-agent-code-securitycst-3155Google unveiled CodeMender, an AI agent designed to identify security vulnerabilities in code, verify their exploitability, and automatically generate patches for developer review. The tool aims to help defenders match the pace of attackers who are increasingly using AI to accelerate their operations.Fri, 24 Jul 2026 08:53:17 GMThttps://helpnetsecurity.com/2026/07/24/google-selfie-video-sign-in-verificationcst-3156Google has introduced a selfie video sign-in method that verifies account owners are real people and prevents misuse by bots or automated programs. The recorded video is stored securely with user consent and can be deleted from the Google Account at any time. The feature is not yet available across all regions, accounts, or devices.Fri, 24 Jul 2026 08:33:58 GMThttps://helpnetsecurity.com/2026/07/24/car-research-automotive-software-vulnerabilitiescst-3146Modern vehicles contain substantial embedded software running operating systems like Android, Linux, QNX, and VxWorks across dashboard displays and safety-critical systems. Carmakers have transitioned to software-dependent architectures over the past decade, introducing potential vulnerability exposures in these systems. The article examines security risks inherent in automotive software stacks.Fri, 24 Jul 2026 06:30:41 GMThttps://techcrunch.com/2026/07/23/aegisai-founded-by-former-google-security-execs-lands-36m-to-stop-ai-driven-spear-phishingcst-3128AegisAI, a startup founded by former Google security executives, raised $36 million in Series A funding led by Battery Ventures, bringing its total funding to $49 million. The company focuses on defending against AI-driven spear phishing attacks.Thu, 23 Jul 2026 18:38:34 GMThttps://securityweek.com/openai-fixes-chatgpt-agent-flaw-that-could-let-attackers-forge-an-ai-insidercst-3107OpenAI patched a vulnerability that allowed attackers to create, insert, and remotely control covert autonomous AI agents within victim organizations. The flaw, termed AgentForger, could enable threat actors to establish persistent unauthorized access through AI systems.Thu, 23 Jul 2026 15:09:59 GMThttps://thehackernews.com/2026/07/threatsday-android-spyware-plc-attacks.htmlcst-3103This story appears to be a preview or teaser for a ThreatsDay Bulletin covering multiple threat categories including Android spyware, programmable logic controller (PLC) attacks, and artificial intelligence (AI) image prompt injection attacks among other threats.Thu, 23 Jul 2026 15:02:07 GMThttps://bleepingcomputer.com/news/google/eu-fines-google-1-billion-for-digital-markets-act-breaches-in-search-and-play-storecst-3083The European Commission issued a €890 million fine to Google for violating the Digital Markets Act, which regulates fair competition in digital markets. The penalty addresses breaches related to the company's search and app store practices.Thu, 23 Jul 2026 12:33:19 GMThttps://cisa.gov/news-events/ics-advisories/icsa-26-204-02cst-3118Johnson Controls XAAP Android versions prior to 1.53 contain a cleartext storage vulnerability (CVE-2026-34490) that allows attackers with physical device access or those who exploit a separate flaw to read sensitive application data in plaintext. The vulnerability has a CVSS score of 3.3 (low severity) and requires local access without network involvement. Johnson Controls recommends updating to version 1.53 or later and implementing device hardening measures including encryption, screen locks, and mobile device management policies.Thu, 23 Jul 2026 12:00:00 GMThttps://blog.talosintelligence.com/chaos-msarat-living-off-the-browser-to-build-covert-c2-channelcst-3081Cisco Talos discovered msaRAT, a Rust-based remote access trojan attributed to the Chaos ransomware group that establishes command-and-control communications exclusively through Chrome DevTools Protocol rather than direct network connections. The malware is delivered via a malicious MSI installer disguised as a Windows update and leverages the browser, Cloudflare Workers, and Twilio TURN relays to create a covert WebRTC DataChannel for C2 communications. Chaos is a ransomware-as-a-service group active since February 2025 that uses phishing, vishing, and legitimate tools for post-compromise activities before deploying encryption.Thu, 23 Jul 2026 10:00:38 GMThttps://thehackernews.com/2026/07/google-adds-selfie-video-recovery-for.htmlcst-3086Google announced a new account recovery option allowing locked-out users to verify their identity through a selfie video. This method supplements existing recovery mechanisms like email and phone number verification. The feature expands user options for regaining account access when standard credentials are unavailable.Thu, 23 Jul 2026 10:00:00 GMThttps://bleepingcomputer.com/news/security/new-msarat-malware-uses-chrome-edge-browsers-to-route-c2-trafficcst-3068Chaos ransomware operators deployed a new backdoor called msaRAT that conceals command-and-control traffic by routing it through Chrome or Edge browsers. This technique allows attackers to blend malicious communications with legitimate browser traffic, making detection more difficult.Thu, 23 Jul 2026 10:00:00 GMThttps://recordedfuture.com/research/tag-195-evolves-maas-ecosystemcst-3132Insikt Group identified four new malware families associated with TAG-195, a financially motivated malware-as-a-service (MaaS) developer: TinyEgg, ChonkyChicken, a modularized ChonkyChicken variant, and ChromEggscalator. These families demonstrate TAG-195's architectural evolution toward a modular, controller-and-plugin design that loads capability modules on demand rather than embedding all functionality in a single implant. The shift reflects both technical improvements in detection evasion and commercial incentives of the MaaS model, including selective capability provisioning and compartmentalization of risk across customers.Thu, 23 Jul 2026 00:00:00 GMThttps://darkreading.com/mobile-security/fake-bahrain-alert-apps-android-surveillance-malwarecst-3051Cybercriminals distributed a fake alert application disguised as an official Bahrain warning tool, which delivered multi-stage Android spyware to victims. The malware was promoted through counterfeit Google Play storefronts and targeted civilians during a period of heightened tensions from Iranian missile strikes in the region.Wed, 22 Jul 2026 19:42:42 GMThttps://sentinelone.com/labs/frontier-models-tackle-autonomous-long-horizon-malware-analysiscst-3045SentinelLabs evaluated frontier AI models on a multi-stage malware analysis benchmark based on their investigation of fast16, a 2005 sabotage implant, finding that only OpenAI's GPT-5.6 Sol completed the full eight-stage reverse-engineering task. The benchmark tested whether models could maintain investigative integrity as new evidence contradicted earlier conclusions, with successful completion requiring project-scale recovery including withdrawing incorrect conclusions and repairing technical artifacts. The researchers concluded that the strongest current use case is supervised investigative support where human analysts retain authority over objectives, quality control, and final publication.Wed, 22 Jul 2026 16:55:29 GMThttps://bleepingcomputer.com/news/security/adobe-chrome-extension-flaw-let-sites-access-private-whatsapp-chatscst-2996A vulnerability in the Adobe Acrobat extension for Chrome allowed unauthorized access to WhatsApp Web conversations and data without requiring authentication. The flaw exposed private messages and information that should have been protected, affecting users who had both the extension and WhatsApp Web open in their browser.Wed, 22 Jul 2026 13:22:20 GMThttps://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.htmlcst-3013A high-severity path traversal vulnerability (CVE-2026-29059, CVSS 7.5) in open-source developer platform Windmill allows attackers to read arbitrary server files without authentication through the get_log_file endpoint. The flaw has entered active exploitation in the wild.Wed, 22 Jul 2026 12:36:36 GMThttps://reliaquest.com/blog/shadow-ai-non-human-identity-problemcst-3201Shadow AI integrated into engineering and data workflows presents a distinct security risk that differs from consumer chatbot usage. Tools connected to source code repositories, CI/CD pipelines, cloud environments, and production systems can operate through existing employee credentials without appearing as separate accounts in identity systems. Detection requires shifting focus from browser-based activity toward non-human identities and service accounts with privileged access.Wed, 22 Jul 2026 00:00:00 GMThttps://thehackernews.com/2026/07/google-launches-gemini-35-flash-cyber.htmlcst-2953Google DeepMind released Gemini 3.5 Flash Cyber, an AI model tailored to identify, validate, and remediate software vulnerabilities. The model is available in limited pilot form to governments and trusted partners through CodeMender.Tue, 21 Jul 2026 15:09:28 GMThttps://helpnetsecurity.com/2026/07/21/github-repos-malware-campaign-fakegit-ai-agentscst-2925Island researchers discovered approximately 7,600 malicious GitHub repositories, with over 800 masquerading as AI Skills or Model Context Protocol servers, peaking in April 2026. The FakeGit operation involved around 6,600 compromised accounts, roughly 1,400 of which targeted AI tools, agents, and workflows. These repositories offered fraudulent integrations spanning consumer and enterprise applications, including services like Gmail and WhatsApp.Tue, 21 Jul 2026 14:27:38 GMThttps://isc.sans.edu/diary/rss/33172cst-2928This article explains how modern operating systems and browsers detect captive portals on public WiFi networks by attempting to access specific HTTP URLs and checking for redirect responses. Different platforms use different detection URLs: Windows checks msftconnecttest.com, Apple uses captive.apple.com, Android and Chrome use generate_204 endpoints, and Firefox uses detectportal.firefox.com. Understanding these detection mechanisms can help network administrators and security analysts recognize benign traffic patterns and assist users who encounter connectivity issues.Tue, 21 Jul 2026 13:44:56 GMThttps://tenable.com/blog/ai-coding-assistant-agent-harness-attackscst-2912Attackers are poisoning AI coding assistant configuration files to achieve persistent access within developer environments by injecting malicious hooks into settings files used by tools like Cursor, GitHub Copilot, and Claude Code. These configuration files create a uniquely dangerous attack vector because they are trusted as developer settings, automatically executed by IDEs, and treated as authoritative instructions by large language models. The Mini Shai-Hulud worm, analyzed by Tenable, demonstrates this technique by scanning for and compromising AI tool configurations across npm and PyPI packages, enabling silent malware execution each time a developer starts a coding session.Tue, 21 Jul 2026 13:00:00 GMThttps://thehackernews.com/2026/07/open-source-android-ai-agents-could-let.htmlcst-2899Researchers identified vulnerabilities in five open-source mobile AI agent frameworks that allow attackers to inject hidden instructions through Android apps with overlay and storage permissions, potentially escalating to code execution on connected host PCs. The attack chain leverages the AI agent's inability to distinguish between legitimate and malicious text, enabling a path from app-level manipulation to full host compromise.Tue, 21 Jul 2026 11:58:00 GMThttps://bleepingcomputer.com/news/security/cursor-codex-gemini-cli-antigravity-hit-by-sandbox-escapescst-2869Researchers demonstrated sandbox escape vulnerabilities in four AI coding tools: Cursor, Codex, Gemini CLI, and Antigravity. The attacks exploited a common pattern where AI agents write files that host tools subsequently execute, bypassing isolation mechanisms. Google patched Antigravity vulnerabilities and downgraded the severity of two findings.Mon, 20 Jul 2026 21:14:42 GMThttps://rapid7.com/blog/post/tr-exposed-webdav-malware-delivery-lab-analysiscst-2847Security researchers discovered an exposed server functioning as a malware delivery and testing laboratory containing over 1,000 artifacts used for weaponizing shortcut lures, WebDAV execution paths, and social engineering campaigns. The infrastructure revealed a systematic development workflow where attackers employed generative AI to bulk-generate phishing lures, create documentation, and automate QA testing of delivery methods. Analysis of the exposed directory showed the operator testing Unicode spoofing, filename obfuscation, signed binary execution, and alternative delivery containers to refine attack reliability.Mon, 20 Jul 2026 13:00:00 GMThttps://research.checkpoint.com/2026/20th-july-threat-intelligence-reportcst-2835Ernst and Young disclosed a breach involving a compromised third-party IT support platform exposing client documents and tax information. Supply chain compromises affected the Jscrambler JavaScript package and multiple artificial intelligence tools including Claude Code, DeepSeek, and Grok Build. Microsoft released 622 patches in July including fixes for two actively exploited vulnerabilities in SharePoint Server and Active Directory Federation Services, while WordPress issued emergency updates for critical remote code execution flaws.Mon, 20 Jul 2026 12:18:41 GMThttps://thehackernews.com/2026/07/russian-speaking-hacker-uses-google.htmlcst-2817A Russian-speaking threat actor tracked as "bandcampro" leveraged Google's Gemini CLI to automate botnet operations, including password cracking and infrastructure setup, across eight compromised dental clinic computers. Analysis of 200 Gemini CLI session logs from March through April 2026 documented the actor's use of the open-source tool to streamline malicious activities.Mon, 20 Jul 2026 09:07:11 GMThttps://securityweek.com/chrome-150-update-patches-severe-memory-safety-bugscst-2820Google released Chrome version 150, which addresses six critical and high-severity use-after-free vulnerabilities in the browser. These memory safety bugs posed significant security risks to users running earlier versions of Chrome.Mon, 20 Jul 2026 08:12:19 GMThttps://helpnetsecurity.com/2026/07/20/product-showcase-zonealarm-mobile-security-adds-customizable-content-filtering-to-mobile-securitycst-2812Check Point released ZoneAlarm Mobile Security, a mobile protection app that defends against phishing, malicious websites, and fraudulent links across iOS, Android, and Apple silicon Macs. The application features customizable content filtering and a Safari extension that checks websites before loading.Mon, 20 Jul 2026 04:30:34 GMThttps://elastic.co/security-labs/contagious-interview-malware-svg-steganographycst-2774Elastic Security Labs discovered a North Korean-aligned campaign, tracked as REF9403, that uses fake job postings and coding challenges to distribute malware hidden in SVG image files via steganography. The trojanized code repositories appear functional but install a four-stage payload including credential and wallet stealers, file exfiltration, a Socket.IO-based remote access trojan, and clipboard stealing capabilities. The campaign demonstrates how threat actors target developers to establish initial access for downstream supply chain attacks.Sat, 18 Jul 2026 00:00:00 GMThttps://darkreading.com/cloud-security/google-bets-agentic-defense-strategy-outpace-attackerscst-2761Google Cloud has integrated Wiz capabilities into a platform designed to automate threat detection and remediation using agentic approaches. The integration aims to address emerging AI-driven attacks through automated defense mechanisms.Fri, 17 Jul 2026 11:50:25 GMThttps://thehackernews.com/2026/07/eu-orders-google-to-open-android-mic.htmlcst-2752The European Commission has ordered Google to grant rival AI assistants the same access to Android hardware and functionality that Gemini currently enjoys, including camera, microphone, screen content, wake-word activation, and the ability to control other applications. Google must implement these changes in Android 18, with a compliance deadline of August 1, 2027.Fri, 17 Jul 2026 11:44:41 GMThttps://wired.com/story/san-francisco-demands-apple-and-google-delete-ai-nudify-apps-from-app-storescst-2750San Francisco's City Attorney sent cease-and-desist letters to Apple and Google demanding they remove 13 face-swap applications from their app stores. The apps are designed to generate non-consensual intimate imagery targeting women and girls, generating revenue for the platforms hosting them.Fri, 17 Jul 2026 10:00:00 GMThttps://helpnetsecurity.com/2026/07/17/1password-anthropic-claude-integrationcst-27481Password has released a beta integration for Claude that allows the AI assistant to complete authentication-required browser tasks while keeping user passwords and secrets protected. The feature is available to paid Claude subscribers using Claude Desktop on macOS and compatible with 1Password individual, family, and business plan customers. The integration requires specific software components including Claude Desktop, the 1Password desktop app, and browser extension.Fri, 17 Jul 2026 09:17:44 GMThttps://microsoft.com/en-us/security/blog/2026/07/16/acr-stealer-two-observed-intrusion-chains-amid-increased-threat-activitycst-2732Microsoft Defender Experts observed increased ACR Stealer activity from late April 2026 to mid-June 2026, identifying two distinct intrusion campaigns that use ClickFix social engineering to deliver information-stealing malware. Campaign 1 employs WebDAV-based payload delivery with Python loaders and blockchain-backed command-and-control, while Campaign 2 uses MSHTA and steganography for fileless execution. Both ultimately target browser credentials, authentication tokens, and sensitive enterprise documents.Thu, 16 Jul 2026 23:12:02 GMThttps://bleepingcomputer.com/news/security/claude-chrome-extension-flaw-lets-malicious-extensions-trigger-ai-actionscst-2716A vulnerability in Anthropic's Claude Chrome extension allows malicious extensions to simulate user clicks and trigger predefined AI actions without explicit user consent. The flaw could be exploited to abuse Claude's access to connected services including Gmail, Google Docs, Google Calendar, and Salesforce.Thu, 16 Jul 2026 19:26:07 GMThttps://thehackernews.com/2026/07/threatsday-game-cheat-spyware-24-hour.htmlcst-2694This week's security news covers multiple attack vectors including game cheat spyware, rapid ransomware deployment, and Chrome synchronization exploitation for surveillance. The stories highlight how attackers leverage seemingly legitimate tools, weak configurations, and straightforward attack paths to compromise systems and escalate damage.Thu, 16 Jul 2026 15:41:15 GMThttps://cloud.google.com/blog/topics/threat-intelligence/ai-assisted-vulnerability-managementcst-2709Mandiant Consulting outlines a blueprint for safely integrating large language model agents into vulnerability management workflows, given that mean time-to-exploit has dropped to negative seven days. The guidance emphasizes establishing operational guardrails such as data security controls, zero data retention agreements with providers, workload isolation, and combining AI capabilities with deterministic controls and human oversight. Organizations deploying AI agents should extend existing security frameworks into the AI execution environment to manage architectural risks while accelerating vulnerability discovery and remediation.Thu, 16 Jul 2026 14:00:00 GMThttps://helpnetsecurity.com/2026/07/16/jailbroken-google-gemini-cli-botnetcst-2684A Russian-speaking threat actor named bandcampro leveraged a jailbroken version of Google's Gemini CLI to build and manage botnet command-and-control infrastructure targeting a dental clinic. Over more than 200 sessions between March 19 and April 21, 2026, the attacker deployed malware across eight clinic computers and accessed the OpenDental database, accomplishing botnet reconstruction in approximately six minutes.Thu, 16 Jul 2026 12:08:46 GMThttps://cyberscoop.com/google-chrome-sync-cyberstalking-exploitcst-2637Cyberstalkers are exploiting Google Chrome's sync feature to monitor victims' browsing history and access stored passwords by signing into a separate Google account on a target's phone. Researchers at Certo Software documented cases where attackers needed only brief physical access to enable sync, allowing surveillance from any device worldwide. The misuse reflects a shift toward exploiting legitimate app functionality as traditional spyware becomes harder to deploy on modern smartphones.Wed, 15 Jul 2026 20:42:37 GMThttps://bleepingcomputer.com/news/security/google-gemini-cli-abused-as-a-hacking-agent-malware-botnet-operatorcst-2614A Russian-speaking threat actor identified as bandcampro leveraged Google's open-source Gemini CLI tool to conduct hacking activities and operate a botnet infrastructure. The actor demonstrated how the AI tool could be repurposed for malicious purposes including automated exploitation and command execution.Wed, 15 Jul 2026 18:33:48 GMThttps://tenable.com/blog/claude-tag-slack-access-modelcst-2608Anthropic's Claude Tag is a Slack AI agent that operates using admin-configured shared credentials rather than individual user credentials, following a service-identity pattern similar to deploy bots and workflow automations. Access to connected services is controlled by admin-configured bundles at the workspace or channel level, with organization-wide controls governing who can direct the agent. Channel members can collaborate with Claude, but their participation does not grant new permissions beyond what the admin bundle defines.Wed, 15 Jul 2026 15:08:00 GMThttps://cloud.google.com/blog/topics/threat-intelligence/exposed-cloud-functions-hardencst-2607Mandiant security assessments identify publicly exposed serverless applications and functions lacking authentication that frequently contain vulnerabilities in custom code or third-party packages. Successful exploitation of application-level flaws like local file inclusion or command injection can grant attackers remote code execution and container-level access, which may lead to lateral movement and cloud environment compromise. The article describes attack scenarios and hardening strategies for securing serverless deployments that must remain publicly accessible.Wed, 15 Jul 2026 14:00:00 GMThttps://thehackernews.com/2026/07/firefox-chrome-adobe-and-vmware-updates.htmlcst-2594Mozilla released Firefox updates to patch two critical vulnerabilities in the JavaScript/WebAssembly and DOM/Navigation components with known public exploit code. Chrome, Adobe, and VMware also issued updates for multiple critical security flaws, though details on those vendors' patches are not provided in this incomplete summary.Wed, 15 Jul 2026 13:18:53 GMThttps://securityweek.com/critical-vulnerabilities-patched-with-fresh-chrome-150-firefox-152-updatescst-2544Google Chrome 150 and Mozilla Firefox 152 were released with patches addressing critical vulnerabilities. Public exploit code exists for the Firefox flaws, though active exploitation in the wild has not been observed.Wed, 15 Jul 2026 07:24:52 GMThttps://bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-kb5099539-extended-security-updatecst-2513Microsoft released Windows 10 KB5099539, an extended security update containing July 2026 Patch Tuesday fixes for 570 vulnerabilities and additional security patches. This update addresses a substantial volume of identified flaws across the Windows 10 platform.Tue, 14 Jul 2026 18:49:28 GMThttps://securityweek.com/unpatched-claude-for-chrome-flaw-lets-extensions-read-gmail-calendarcst-2480A vulnerability in Claude for Chrome remains unpatched across eight updates, allowing malicious extensions to access sensitive user data including Gmail and Calendar contents. The flaw appears related to ClaudeBleed, a class of vulnerabilities affecting how the extension isolates data from other browser extensions.Tue, 14 Jul 2026 13:00:00 GMThttps://helpnetsecurity.com/2026/07/14/security-key-windows-login-google-workspacecst-2487Google has begun rolling out support for FIDO2 physical security keys and phone passkeys as a second authentication factor for Google Credential Provider for Windows (GCPW) across all Google Workspace customers. GCPW enables Windows login using Google Workspace credentials, and the new capability allows administrators to enforce two-step verification with hardware security keys. The update strengthens account security by providing organizations with stronger multi-factor authentication options for Windows device access.Tue, 14 Jul 2026 10:35:48 GMThttps://thehackernews.com/2026/07/grok-build-uploads-entire-git.htmlcst-2463xAI's Grok Build coding CLI tool was uploading complete Git repositories, including full commit history, to xAI's Google Cloud Storage infrastructure rather than only the specific files needed for a task. A researcher discovered this behavior while testing version 0.2.93 and was able to recover files from an intercepted upload that the agent had been instructed not to access.Tue, 14 Jul 2026 09:02:48 GMThttps://thehackernews.com/2026/07/google-and-microsoft-pull-modheader.htmlcst-2433Google and Microsoft removed ModHeader, a browser extension with approximately 1.6 million installations, after security researchers discovered a dormant data collector embedded in the official store version. The collector remained inactive due to an empty allowlist and showed no evidence of having transmitted any user browsing data.Mon, 13 Jul 2026 17:17:24 GMT