Google

Security news, advisories and exploited vulnerabilities.

Actively exploited (CISA KEV)

CVEs in the news

Timeline (last 30 days)

• Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks — Help Net Security, 2026-10-19
• OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys — The Hacker News, 2026-10-19
• Google Unveils New Android AI Protections to Block Scam Calls, Phishing Links and OTP Theft — Cybersecurity News, 2026-10-19
• Hackers Target 60 Indian Banking and UPI Apps With New GhostBat Android Malware — Cybersecurity News, 2026-10-18
• Google Fixes 10 Chrome Vulnerabilities, Including Memory Corruption Flaw Found With Claude AI — Cybersecurity News, 2026-10-17
• Two Hawks in a Pod: one Android RAT behind a flock of fake Japanese brands — 0dayfans, 2026-10-16
• UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing — The Hacker News, 2026-10-16
• In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit — SecurityWeek, 2026-10-16
• New YuanKong Android RAT Hijacks Phones to Steal Banking PINs and Passwords — Cybersecurity News, 2026-10-16
• CVE-2026-83831 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability — Microsoft Security Update Guide, 2026-10-16
• CVE-2026-85890 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability — Microsoft Security Update Guide, 2026-10-16
• CVE-2026-85897 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability — Microsoft Security Update Guide, 2026-10-16
• CVE-2026-85898 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability — Microsoft Security Update Guide, 2026-10-16
• CVE-2026-96198 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability — Microsoft Security Update Guide, 2026-10-16
• CVE-2026-96199 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106287: Information loss — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106288: Missing authorization — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106289: Missing authorization — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106291: Use after free — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106292: Buffer overflow — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106412: Race condition — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106293: Type confusion — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106413: Race condition — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106294: Incomplete cleanup — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106415: Information leak — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106295: Incorrect authorization — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106416: Code injection — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106297: Incorrect authorization — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106417: Integer overflow — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106299: Improper input validation — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106418: Missing authorization — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106300: Race condition — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106420: Incorrect calculation — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106301: Confused deputy — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106421: Use after free — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106302: UI misrepresentation — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106422: Incorrect authorization — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106303: Observable discrepancy — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106423: Use after free — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106304: Out of bounds read — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106424: Information leak — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106306: Incorrect authorization — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106425: Missing authorization — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106307: Incorrect authorization — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106426: Race condition — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106308: Incorrect reference resolution — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106309: Incorrect authorization — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106310: Use of released resource — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106311: Clickjacking — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106312: Missing authorization — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106314: Incorrect authorization — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106315: Use after free — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106316: UI misrepresentation — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106318: Use after free — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106321: Information leak — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106322: Open redirect — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106324: Incorrect authorization — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106325: Incorrect reference resolution — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106327: Incorrect authorization — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106328: Incorrect authorization — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106329: Incorrect authorization — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-110136: Use after free — Microsoft Security Update Guide, 2026-10-16
• Chromium CVE-2026-106330: Information leak — Microsoft Security Update Guide, 2026-10-16
• China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns — Infosecurity Magazine, 2026-10-16
• Google Automatically Adds Your Phone Number to Every Google Account on Your Android Phone — Cybersecurity News, 2026-10-16
• Android adds AI-powered scam alerts, hangs up on bank impostors — Help Net Security, 2026-10-16
• Hackers Target 60 Indian Banking and UPI Apps With New GhostBat Android Malware — Cybersecurity News, 2026-10-16
• Android gets AI defenses against messaging scams, fake calls — BleepingComputer, 2026-10-15
• Update Chrome: Google fixes 37 security flaws, including seven critical bugs — Malwarebytes Labs, 2026-10-15
• Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies — SecurityWeek, 2026-10-15
• Hirudo Android Trojan Replaces Banking Apps to Steal Credentials — Security Affairs, 2026-10-15
• Fake Chrome App on Google Play Evades Detection and Reaches 100,000+ Downloads — Cybersecurity News, 2026-10-15
• ZDI-26-778: Adobe Photoshop DCM Pixel Data Parsing Integer Overflow Remote Code Execution Vulnerability — ZDI Published Advisories, 2026-10-15
• YuanKong RAT: the Android remote-control service that stamps its operators' names into every build — 0dayfans, 2026-10-15
• Android is using AI to suss out scammers in Google Messages — The Verge, 2026-10-14
• PAN-SA-2026-0013 Chromium: Monthly Vulnerability Update (October 2026) (Severity: HIGH) — Palo Alto Networks Advisories, 2026-10-14
• Meta, Google, Microsoft and OpenAI Join Global Crackdown on West African Scam Networks — Cybersecurity News, 2026-10-14
• Hirudo Android malware replaces banking apps to evade security checks — BleepingComputer, 2026-10-14
• Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days — The Hacker News, 2026-10-14
• Fake Calendly “Meta Careers” pages steal Facebook and Google logins — Malwarebytes Labs, 2026-10-14
• Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks — The Hacker News, 2026-10-14
• GCP-2026-039 — Google Cloud Security Bulletins, 2026-10-14
• Google Awarded $250,000 Bounty for a Full-chain Chrome Exploit Found Using GPT-5.6 — Cybersecurity News, 2026-10-14
• Multiple Google Chrome Flaws Could Enable Memory Corruption and Code Execution Attacks — Cybersecurity News, 2026-10-14
• Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise — SecurityWeek, 2026-10-14
• Hackers Abuse Google Search to Attacks ITadmins with Weaponized PuTTY Installer — Cybersecurity News, 2026-10-14
• Google quadruples Chrome bug bounty base pay, offers up to $20,000 for sandbox escapes — Help Net Security, 2026-10-14
• Google Partially Reverses Chrome Bug Bounty Cuts — SecurityWeek, 2026-10-13
• Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies — The Hacker News, 2026-10-13
• Google DevSite Flaw Let Attackers Execute Remote Code Through Forged Flask Sessions — Cybersecurity News, 2026-10-12
• Google DevSite Flaw Let Attackers Execute Remote Code Through Forged Flask Sessions — Cybersecurity News, 2026-10-12
• Low-cost Android phones are arriving with malware that owners can’t uninstall — Help Net Security, 2026-10-12
• Bitdefender finds preinstalled Android malware you can’t uninstall, seen in 150 countries — Security Affairs, 2026-10-11
• Two characters open up a world of typosquatting opportunities in Chromium browsers — The Register, 2026-10-10
• Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks — BleepingComputer, 2026-10-09
• Google Domains Impacted by Recent ccTLD Hijacks — SecurityWeek, 2026-10-09
• Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries — SecurityWeek, 2026-10-09
• Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own — The Hacker News, 2026-10-09
• Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own — SecurityWeek, 2026-10-09
• Lawmakers warn Google could expose Spirit Airlines data in $10 million AI training deal — The Record, 2026-10-08
• Low-cost Android phones ship with residential proxy malware — BleepingComputer, 2026-10-08
• Attackers hijack country-code domains to impersonate Google and other services — Malwarebytes Labs, 2026-10-08
• Thousands of cheap Android phones shipped with ad-fraud malware — The Record, 2026-10-08
• UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing — Cisco Talos, 2026-10-08
• Novinarya: An Android stealer that hides its live C2 in a shop bio — 0dayfans, 2026-10-08
• Attackers hijacked top-level domains, minted fake security certs for Google and other orgs — The Register, 2026-10-07
• Google issues Android security updates: who can get them and how — Malwarebytes Labs, 2026-10-07
• Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains — Help Net Security +3 sources, 2026-10-07
• Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains — Help Net Security, 2026-10-07
• Chrome 155 Update Patches 247 Vulnerabilities — SecurityWeek, 2026-10-07
• Update Chrome and ChromeOS to fix critical security issues — Malwarebytes Labs, 2026-10-07
• Android’s October 2026 Updates Patch 25 Vulnerabilities — SecurityWeek, 2026-10-07
• Google CTF 2025: webz — 0dayfans, 2026-10-07
• Hackers obtain counterfeit TLS certificates for Google and other large services — Ars Technica, 2026-10-06
• Google's PageBreak AI Agent Finds 500 Flaws in Its Web Apps — Dark Reading, 2026-10-06
• Nikkei discloses breaches of employees’ Microsoft, Google email accounts — BleepingComputer, 2026-10-06
• Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports — The Hacker News, 2026-10-06
• Chromium: WebGPU Security Technical Report — 0dayfans, 2026-10-06
• Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports — SecurityWeek, 2026-10-05
• Google Suspends Open-Source Bug Bounty Due to AI Vulnerability Reports — Infosecurity Magazine, 2026-10-05
• Google halts open-source bug bounty program amid AI spam surge — BleepingComputer, 2026-10-05
• Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions — TechCrunch Security +1 sources, 2026-10-04
• Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools — The Hacker News, 2026-10-02
• Inside Gemini 4 Argon, the model Google is testing on its own infrastructure first — Security Affairs, 2026-10-01
• Inside Gemini 4 Argon, the model Google is testing on its own infrastructure first — Security Affairs, 2026-10-01
• Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders — SecurityWeek, 2026-10-01
• Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version — The Hacker News, 2026-10-01
• Google: Vulnerability disclosures double to 10,000 per month as AI fuels exploitation — The Record, 2026-09-30
• Google: AI Is Changing the Pace and Profile of Vulnerability Discovery — SecurityWeek, 2026-09-30
• AI-Found Vulnerabilities More Likely to Enable RCE, Google Says — Infosecurity Magazine, 2026-09-30
• Chrome, Firefox Updates Patch Over 100 Vulnerabilities — SecurityWeek, 2026-09-30
• Viidure Dashcam Android Application — CISA ICS Advisories, 2026-09-29
• How we found 24 Android vulnerabilities using our open source AI security agent — GitHub Security Lab, 2026-09-28
• Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions — Dark Reading, 2026-09-28
• Threat Actors Use Google Ads To Target Ledger Users — Zscaler ThreatLabz, 2026-09-25
• Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what? — Ars Technica, 2026-09-25
• Fake Google Security Team ad says 'no script reading' in voice phishing - then prints the script — The Register, 2026-09-25
• What We Missed: Google Gemini Joins the AI Escape Party — Dark Reading, 2026-09-25
• RemControl Banking Trojan Gives Attackers Remote Control of Android Devices — Infosecurity Magazine, 2026-09-25
• Decades-old file security flaws found in Android, Linux, macOS, and Windows — The Register, 2026-09-24
• Google to critical infra orgs: Our AI scanners won't be evil, promise — The Register, 2026-09-24
• Update Chrome: 108 security fixes for desktop, new release for Android — Malwarebytes Labs, 2026-09-24
• Google’s location data privacy failures draw a €403 million fine — Malwarebytes Labs, 2026-09-24
• One Tap Too Far: Using Shortcuts to Bypass Chrome for iOS Call Prompts — 0dayfans, 2026-09-23
• Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts — Socket, 2026-09-23
• Fake Claude Max giveaway hides a Google account phishing trap — Malwarebytes Labs, 2026-09-23
• Mind the (Patch) Gap, Part 2: Fake Websites Used to Deploy Chrome & Windows 0-Day Exploits — Volexity, 2026-09-21
• Google Hit with €403m GDPR Fine Over Location Data Practices — Infosecurity Magazine, 2026-09-21
• An undercover Google analyst infiltrated a notorious supply-chain hacking gang — Ars Technica, 2026-09-20
• Google’s Gemini is the latest AI model to hack other companies — TechCrunch Security, 2026-09-19