Výsledky hledání

SPOJENO PŘES CVE Google Chrome 153 — Stable Channel Security Update

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.6, CVEs: CVE-2026-93374, CVE-2026-93372, CVE-2026-93375, CVE-2026-93382, CVE-2026-93387, CVE-2026-93373, CVE-2026-93381, CVE-2026-93379, CVE-2026-93377, CVE-2026-93380, CVE-2026-93384, CVE-2026-93383, CVE-2026-93376, CVE-2026-93378, CVE-2026-93385, CVE-2026-93386, Summary: Google released Chrome 153.0.8010.52/.53 for Windows/Mac and 153.0.8010.52 for Linux on 17 September. The update contains 16 security…

EPSS 0.00 CVSS 9.6 CVE-2026-93372 CVE-2026-93373 CVE-2026-93374 CVE-2026-93375 CVE-2026-93376 CVE-2026-93377 CVE-2026-93378 CVE-2026-93379 CVE-2026-93380 CVE-2026-93381 CVE-2026-93382 CVE-2026-93383 CVE-2026-93384 CVE-2026-93385 CVE-2026-93386 CVE-2026-93387 Google FI FR

tg: zranitelnost tg: novinka v produktu

19. 9. 04:00 · NCSC-FI · Google Chrome 153 — Stable Channel Security Update 18. 9. 02:00 · CERT-FR – avis · Multiples vulnérabilités dans Google Chrome (18 septembre 2026)

Google security advisory (AV26-939)

Serial number: AV26-939Date: September 18, 2026 As of September 17, 2026, Google is affected by vulnerabilities in the following product: Chrome Prior to 153.0.8010.53 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Stable Channel Update for Desktop

Google CA

tg: zranitelnost

18. 9. 17:40 · Cyber Centre Kanada · Google security advisory (AV26-939)

New Android malware uses AI to steal bank logins and PINs

Researchers at Zimperium’s zLabs have analyzed an Android Trojan that uses an automated, multi-stage infection process. What’s new is that RatHat gives a live AI assistant the keys to the accessibility tree of the infected device and uses it to determine where to tap or scroll, rather than following a hardcoded script. The variable attack path makes it harder for signature- and rule-based mobile security tools to detect this Trojan. It also abuses Android Debug Bridge (ADB), a legitimate tool…

Google finance US

tg: rozbor tg: propagace tp: malware tp: podvod tp: AI tp: identita

18. 9. 17:37 · Malwarebytes Labs · New Android malware uses AI to steal bank logins and PINs

Webinar: Which Google Workspace security controls actually matter?

Fast-growing companies face countless recommendations for securing Google Workspace, but not every control provides the same value. This webinar examines real-world breaches to explore which security controls matter most, which may be overrated, and where lean security teams should focus their resources. [...]

Google US

tg: návod tg: propagace

18. 9. 15:10 · BleepingComputer · Webinar: Which Google Workspace security controls actually matter?

Risolte vulnerabilità in Google Chrome

Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 16 nuove vulnerabilità di sicurezza, di cui 2 con gravità “critica” e 7 con gravità “alta”.

EPSS 0.00 CVE-2026-93372 CVE-2026-93373 CVE-2026-93374 CVE-2026-93375 CVE-2026-93377 CVE-2026-93379 CVE-2026-93381 CVE-2026-93382 CVE-2026-93387 Google IT

tg: zranitelnost tg: novinka v produktu

18. 9. 09:28 · CSIRT Itálie (ACN) · Risolte vulnerabilità in Google Chrome

Pixel Update Bulletin—September 2026

Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: None, CVEs: CVE-2026-56914, CVE-2026-58773, CVE-2026-55318, CVE-2026-55343, CVE-2026-56920, CVE-2026-56967, CVE-2026-58683, CVE-2026-58710, CVE-2026-0179, CVE-2026-0187, CVE-2026-0192, CVE-2026-0194, CVE-2026-0199, CVE-2026-0200, CVE-2026-55302, CVE-2026-55317, CVE-2026-55323, CVE-2026-55329, CVE-2026-55337, CVE-2026-55357 (+90 other associated CVEs), Summary: The Pixel Update Bulletin contains details of…

Google FI

tg: zranitelnost tg: novinka v produktu

17. 9. 04:00 · NCSC-FI · Pixel Update Bulletin—September 2026

Google security advisory (AV26-926)

Serial number: AV26-926 Date: September 16, 2026 As of September 15, 2026, Google is affected by vulnerabilities in the following product: Chrome Prior to 153.0.8010.48 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Stable Channel Update for Desktop

Google CA

tg: zranitelnost

16. 9. 19:13 · Cyber Centre Kanada · Google security advisory (AV26-926)

Webinar: What happens in the first hours of a Google Workspace breach

The first hours after discovering a Google Workspace breach can determine how an incident unfolds. This webinar examines real-world breaches to show which early response decisions can limit the impact and which can make matters worse. [...]

Google US

tg: návod tg: propagace tp: únik dat

16. 9. 14:11 · BleepingComputer · Webinar: What happens in the first hours of a Google Workspace breach

Aggiornamenti di sicurezza per dispositivi Google Pixel

Aggiornamenti di sicurezza Google di settembre risolvono molteplici vulnerabilità, di cui 46 con gravità “critica” e 63 con gravità “alta”, nei dispositivi Pixel.

Google IT

tg: zranitelnost

16. 9. 11:37 · CSIRT Itálie (ACN) · Aggiornamenti di sicurezza per dispositivi Google Pixel

Risolte vulnerabilità in Google Chrome

Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 42 nuove vulnerabilità di sicurezza, di cui 3 con gravità “critica” e 28 con gravità “alta”.

Google IT

tg: zranitelnost tg: novinka v produktu

16. 9. 10:16 · CSIRT Itálie (ACN) · Risolte vulnerabilità in Google Chrome

Multiples vulnérabilités dans Google Chrome (16 septembre 2026)

De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Google FR

tg: zranitelnost

16. 9. 02:00 · CERT-FR – avis · Multiples vulnérabilités dans Google Chrome (16 septembre 2026)

Multiples vulnérabilités dans Google Pixel (16 septembre 2026)

De multiples vulnérabilités ont été découvertes dans Google Pixel. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données. Google indique que la vulnérabilité...

Google FR

tg: zranitelnost

16. 9. 02:00 · CERT-FR – avis · Multiples vulnérabilités dans Google Pixel (16 septembre 2026)

Google’s new search redirects make links harder to check before you click

Google is changing how some links in its search results work. Instead of linking directly to the destination, Google has started routing some search result links through opaque google.com/goto?url=... redirects. The url parameter does not show a readable version of the destination but uses a custom, Google-specific encoding. Google confirmed the rollout to Search Engine Roundtable: “We have a long history of deploying technical measures against evolving forms of abuse, and we regularly take…

Google US

tg: novinka v produktu tg: názor tp: phishing

14. 9. 16:17 · Malwarebytes Labs · Google’s new search redirects make links harder to check before you click

Webinar: How malicious OAuth apps can lead to Google Workspace breaches

Attackers can combine social engineering with malicious OAuth applications to gain access to Google Workspace data without relying solely on stolen passwords. This webinar examines two attacks to show how these breaches unfold and which security controls can help stop them. [...]

Google US

tg: návod tg: propagace tp: phishing tp: identita

14. 9. 14:15 · BleepingComputer · Webinar: How malicious OAuth apps can lead to Google Workspace breaches

The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions

Elastic Security Labs has tracked REF9334, a Brazilian banking malware operation, since May 2025. Its toolkit is called KREMLIN (as named by the malware author, Kr3mlin4rt1st), though nothing about the operation is Russian. Lures impersonate twelve Brazilian banks; error messages and code comments are written in Portuguese, and the operators' Ethereum transactions cluster during São Paulo working hours. Over 15 months and seven campaigns, they built a malicious browser extension that installs…

Google Microsoft finance US

tg: varování tg: rozbor tp: malware tp: podvod

14. 9. 02:00 · Elastic Security · The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions

Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware

A single X DM split into two malware chains: AMOS stealer on Mac, NetSupport Manager on Windows, see the Huntress SOC analyst breakdown.

Google US

tg: varování tg: rozbor tp: malware tp: phishing

11. 9. 18:30 · Huntress · Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware

BlueMoon exploit kit turns Chrome and Windows flaws into attacks

BlueMoon, a shared Chrome and Windows exploit kit, shows why “patch later” is becoming a dangerous gamble. Security updates are easy to put off. The browser still opens, Windows still works, and choosing to relaunch your browser or restart your computer later can feel harmless. But a newly documented exploit kit called “BlueMoon” shows how quickly patching delays can become dangerous. Proofpoint Researchers found four espionage groups using the same exploit chain against Chrome browsers running…

Google Microsoft US

tg: varování tg: zneužíváno tg: rozbor tg: propagace tp: malware tp: phishing tp: špionáž

10. 9. 17:49 · Malwarebytes Labs · BlueMoon exploit kit turns Chrome and Windows flaws into attacks

Google Chrome Stable Channel Update

Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: 9.6, CVEs: CVE-2026-87464, CVE-2026-87488, CVE-2026-87438, CVE-2026-87527, CVE-2026-87628, CVE-2026-87512, CVE-2026-87585, CVE-2026-87444, CVE-2026-87447, CVE-2026-87440, CVE-2026-87633, CVE-2026-87525, CVE-2026-87578, CVE-2026-87517, CVE-2026-87524, CVE-2026-87569, CVE-2026-87554, CVE-2026-87467, CVE-2026-87492, CVE-2026-87520 (+210 other associated CVEs), Summary: The Chrome team is delighted to announce the…

CVSS 9.6 Google FI

tg: zneužíváno tg: zranitelnost tg: novinka v produktu

10. 9. 04:00 · NCSC-FI · Google Chrome Stable Channel Update

Multiples vulnérabilités dans Google Android (10 septembre 2026)

De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.

Google FR

tg: zranitelnost

10. 9. 02:00 · CERT-FR – avis · Multiples vulnérabilités dans Google Android (10 septembre 2026)

Aggiornamenti di sicurezza Android

Aggiornamenti di sicurezza Google sanano 104 vulnerabilità, di cui 31 con gravità “critica” e 73 con gravità “alta”, nei componenti Android. Tali vulnerabilità, qualora sfruttate, potrebbero consentire di eseguire codice arbitrario, elevare i privilegi, accedere a informazioni riservate o compromettere la disponibilità del servizio sui dispositivi interessati.

Google Android IT

tg: zranitelnost

9. 9. 15:01 · CSIRT Itálie (ACN) · Aggiornamenti di sicurezza Android

Risolte vulnerabilità in Google Chrome

Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 230 nuove vulnerabilità di sicurezza, di cui 5 con gravità “critica” e 41 con gravità “alta”.

Google IT

tg: zranitelnost

9. 9. 11:24 · CSIRT Itálie (ACN) · Risolte vulnerabilità in Google Chrome

Patch Tuesday - September 2026

Microsoft is publishing 974 own-product vulnerabilities on September 2026 Patch Tuesday, including 723 vulnerabilities in Windows. Along with Microsoft fixes for 25 non-Microsoft CVEs, that brings the total number of vulnerabilities on the table today to 999. Whether this is the biggest Patch Tuesday ever depends on how we count, but this is by far the most CVEs that Microsoft has ever published in a single day. As Rapid7 noted last month, there is no reason to suppose that Patch Tuesday will…

Microsoft Google US

tg: zneužíváno tg: zranitelnost tg: přehled

8. 9. 23:44 · Rapid7 · Patch Tuesday - September 2026

Webinar: The forgotten Google Workspace access that can lead to a breach

Third-party applications connected to Google Workspace can retain access long after their original purpose is forgotten. This webinar examines how overly permissive integrations contribute to breaches and which security controls can help fast-growing companies reduce their exposure. [...]

Google US

tg: návod tg: propagace tp: identita

8. 9. 14:40 · BleepingComputer · Webinar: The forgotten Google Workspace access that can lead to a breach

ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager

Cisco Talos began an investigation after observing a DLL named "verification.google" executing from WebDAV at a Ukrainian government organization. We assess with moderate confidence that the attacks are not targeted at a particular organization, but are a part of a cryptocurrency and credentials-stealing operation using the Amatera stealer as the primary payload. Pivoting around the similar WebDAV behavior led to a second loader named "pf.ch" and allowed us to reconstruct its earlier delivery…

Google Cloudflare NetSupport veřejná správa US

tg: varování tg: rozbor tp: malware tp: phishing tp: podvod

8. 9. 12:01 · Cisco Talos · ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager

ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2

Cisco Talos is tracking a cryptocurrency-stealing campaign that abuses the Google Visualization API for command and control (C2), retrieving obfuscated JavaScript from a publicly published Google Sheets document and injecting it into the victim's browser session. The actors use a variation on ClickFix social engineering. Instead of convincing targets to run commands against the operating system, they convince targets to paste JavaScript into the Chrome address bar or install it into the…

Google Tampermonkey US

tg: varování tg: rozbor tp: malware tp: phishing tp: podvod

8. 9. 12:00 · Cisco Talos · ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2

What’s new with Google Cloud

Want to know the latest from Google Cloud? Find it here in one handy location. Check back regularly for our newest updates, announcements, resources, events, learning opportunities, and more. Tip: Not sure where to find what you’re looking for on the Google Cloud blog? Start here: Google Cloud blog 101: Full list of topics, links, and resources. aside_block <ListValue: []> Aug 31 - Sept 4 Automate VM guest software lifecycle with VM Extension Manager, now GAGoogle Cloud VM Extension Manager is…

Google US

tg: novinka v produktu tg: přehled tp: AI

4. 9. 09:00 · Mandiant / Google TI · What’s new with Google Cloud

Your phone or computer may soon ask how old you are

First, the good news: If you use a Linux-based operating system, you may not be asked your age in a few months. The bad news is that Windows, macOS, iOS, and Android users in California will be. California has passed a law that requires a range of operating systems to start collecting your age when you first set them up. Under the state’s Digital Age Assurance Act (DAAA), signed into law in October 2025, Windows, macOS, iOS, and Android will all have to do this from January 1, 2027. Operating…

Microsoft Apple Google US

tg: regulace tp: soukromí

3. 9. 10:54 · Malwarebytes Labs · Your phone or computer may soon ask how old you are

Google Chrome Stable Channel Update for Desktop

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-84353, CVE-2026-84352, CVE-2026-84354, CVE-2026-84359, CVE-2026-84357, CVE-2026-84324, CVE-2026-84349, CVE-2026-84326, CVE-2026-84333, CVE-2026-84351, CVE-2026-84325, CVE-2026-84328, CVE-2026-84347, CVE-2026-84323, CVE-2026-84355, CVE-2026-84358, CVE-2026-84332, CVE-2026-84330, CVE-2026-84334, CVE-2026-84348 (+6 other associated CVEs), Summary: The Stable channel has been updated to…

Google FI

tg: zranitelnost tg: novinka v produktu

3. 9. 04:00 · NCSC-FI · Google Chrome Stable Channel Update for Desktop

Google security advisory (AV26-874)

Serial number: AV26-874Date: September 2, 2026 As of September 2, 2026, Google is affected by vulnerabilities in the following product: Chrome Prior to 152.0.7977.75 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Stable Channel Update for Desktop

Google CA

tg: zranitelnost

2. 9. 16:27 · Cyber Centre Kanada · Google security advisory (AV26-874)

Scammers are getting smarter about where they target you 

Scammers are becoming more strategic about where they target people. Nine in ten toll scams—the fake unpaid-toll messages that threaten fines or license suspension—arrive by email or text, while roughly six in ten romance scams show up first on social media. That’s no coincidence. Rather than blasting the same message everywhere, criminals are tailoring different scams to the platforms where they’re most likely to succeed. This finding comes from Malwarebytes’ own threat research systems and…

Google Microsoft Apple Amazon US

tg: rozbor tg: návod tg: propagace tp: phishing tp: podvod

2. 9. 14:45 · Malwarebytes Labs · Scammers are getting smarter about where they target you 

Two critical Chrome flaws put users at risk on malicious websites

Chrome is rolling out an update for its desktop browser. The update includes 26 security fixes, two of which Google rates as critical use-after-free vulnerabilities. The Stable channel has been updated to 152.0.7977.75/.76 for Windows and Mac, and 152.0.7977.75 for Linux. How to update Chrome If you don’t want to wait for the rollout to reach you, manually updating is easy. The easiest option is to allow Chrome to update automatically. But you can end up lagging behind if you never close your…

EPSS 0.00 CVE-2026-84352 CVE-2026-84353 Google US

tg: zranitelnost tg: propagace

2. 9. 13:15 · Malwarebytes Labs · Two critical Chrome flaws put users at risk on malicious websites

Microsoft Defender flags legitimate Google search links as malicious

Microsoft is investigating an issue causing the Defender for Office 365 security software to mistakenly block access to legitimate Google search links. [...]

Microsoft Google US

tg: incident

2. 9. 12:29 · BleepingComputer · Microsoft Defender flags legitimate Google search links as malicious

Risolte vulnerabilità in Google Chrome

Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 26 nuove vulnerabilità di sicurezza, di cui 2 con gravità “critica” e 9 con gravità “alta”.

EPSS 0.00 CVE-2026-84324 CVE-2026-84325 CVE-2026-84326 CVE-2026-84333 CVE-2026-84349 CVE-2026-84351 CVE-2026-84352 CVE-2026-84353 CVE-2026-84354 CVE-2026-84357 CVE-2026-84359 Google IT

tg: zranitelnost tg: novinka v produktu

2. 9. 10:27 · CSIRT Itálie (ACN) · Risolte vulnerabilità in Google Chrome

Multiples vulnérabilités dans Google Chrome (02 septembre 2026)

De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Google FR

tg: zranitelnost

2. 9. 02:00 · CERT-FR – avis · Multiples vulnérabilités dans Google Chrome (02 septembre 2026)

Chrome Web Store extensions caught stealing crypto, browser data

Multiple extensions for Google Chrome and Microsoft Edge delivered a malware framework that deployed modules to steal cryptocurrency, sensitive data, and browser history, as well as inject ClickFix lures. [...]

Google Microsoft US

tg: incident tg: rozbor tp: malware tp: podvod tp: únik dat

30. 8. 16:17 · BleepingComputer · Chrome Web Store extensions caught stealing crypto, browser data

Android 17 adds ECH support to make web browsing harder to track

Google is introducing new network security protections in Android 17 to strengthen connection privacy, address cellular vulnerabilities, and protect the privacy of users' home networks. [...]

Google US

27. 8. 16:00 · BleepingComputer · Android 17 adds ECH support to make web browsing harder to track

Webinar: How Google Workspace breaches happen and what to do next

Google Workspace breaches can begin with social engineering or forgotten third-party integrations rather than sophisticated exploits. This webinar examines real-world breaches, what happens during the critical first hours, and the security controls that can make the greatest difference. [...]

Google US

27. 8. 14:16 · BleepingComputer · Webinar: How Google Workspace breaches happen and what to do next

Risolte vulnerabilità in Google Chrome

Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 327 nuove vulnerabilità di sicurezza, di cui 18 con gravità “critica” e 53 con gravità “alta”.

Google IT

26. 8. 10:07 · CSIRT Itálie (ACN) · Risolte vulnerabilità in Google Chrome

Multiples vulnérabilités dans Google Chrome (26 août 2026)

De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Google FR

26. 8. 02:00 · CERT-FR – avis · Multiples vulnérabilités dans Google Chrome (26 août 2026)

Savjeti Nacionalnog CERT-a za siguran početak školske godine – razmisli prije nego klikneš

Internet je veliko mjesto gdje gotovo svatko može stvarati i dijeliti sadržaj. Zato je važno obratiti pozornost i razmisliti o sadržaju s kojim se susrećete. Prije nego što nešto kliknete, podijelite ili povjerujete, zastanite i razmislite tko je objavio sadržaj i zašto te je li istinit ili je osmišljen da vas navede na krivi trag. Najčešći oblici prijevara na internetu s kojima se možete susresti S početkom školske godine mogu se očekivati prijevare kao što su phishing poruke s navodnim važnim…

Microsoft Google školství HR

25. 8. 10:30 · CERT.hr · Savjeti Nacionalnog CERT-a za siguran početak školske godine – razmisli prije nego klikneš

Google security advisory (AV26-844)

Serial Number: AV26-844Date: August 24, 2026 As of August 20, 2026, Google is affected by vulnerabilities in the following product: Chrome Prior to 151.0.7922.173 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Google Chrome Security Advisory

Google CA

24. 8. 21:03 · Cyber Centre Kanada · Google security advisory (AV26-844)

ToxicPanda 2.0 can take over your Android phone and banking apps

Researchers have uncovered ToxicPanda 2.0, an Android banking Trojan and remote-access tool designed for account takeover and “on-device fraud.” Not only does ToxicPanda 2.0 have a much larger target list of banks and e-wallets, it has also expanded its capabilities by combining banking overlays, remote access, PIN capture, Android accessibility abuse, and attempted Wireless Debugging automation. Together, those functions can help operators turn a compromised phone into a platform for account…

Google finance US

tg: rozbor tg: návod tg: propagace tp: malware tp: podvod tp: identita

24. 8. 15:40 · Malwarebytes Labs · ToxicPanda 2.0 can take over your Android phone and banking apps

A week in security (August 17 – August 23)

Last week on Malwarebytes Labs: Zombie Card: An expired Visa credit card can be used for purchases Medical records, SSNs, and bank details exposed in CareCloud data breach ChatGPT for Teens tackles risky chats and homework shortcuts Twitch wants your content for Amazon AI training. Here’s how to opt out Your Mac already has a built-in firewall. Here’s how to get more from it 9 million images of people’s faces exposed by reverse lookup service 41 deceptive download sites show a real link, then…

Malwarebytes CareCloud Heights Finance Google US

tg: propagace tg: přehled

24. 8. 09:01 · Malwarebytes Labs · A week in security (August 17 – August 23)

SPOJENO PŘES CVE Google Chrome Stable Channel Update for Desktop

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.8, CVEs: CVE-2026-76017, CVE-2026-76018, CVE-2026-76019, CVE-2026-76020, CVE-2026-76021, CVE-2026-76022, CVE-2026-76023, Summary: CVE-2026-76018 8.8 Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. (Chromium security severity: High) CVE-2026-76017 8.8…

EPSS 0.00 CVSS 8.8 CVE-2026-76017 CVE-2026-76018 CVE-2026-76019 CVE-2026-76020 CVE-2026-76021 CVE-2026-76022 CVE-2026-76023 Google FI IT FR

22. 8. 04:00 · NCSC-FI · Google Chrome Stable Channel Update for Desktop 21. 8. 09:37 · CSIRT Itálie (ACN) · Risolte vulnerabilità in Google Chrome 21. 8. 02:00 · CERT-FR – avis · Multiples vulnérabilités dans Google Chrome (21 août 2026)

Going with the Flow(s): Distinct Clusters Target Individuals of Interest to Russia

Written by: Gabby Roncone, Wesley Shields Overview Google Threat Intelligence Group (GTIG) is tracking three distinct suspected Russian cyber espionage threat clusters abusing legitimate authentication flows to target individuals working in academia, aerospace and defense, governments and think tanks across Europe, as well as academia and think tanks within the United States. Examples of these techniques can be found in our previous blog on UNC6293’s phishing operations. We now track an…

Microsoft Google veřejná správa obrana školství US

20. 8. 16:00 · Mandiant / Google TI · Going with the Flow(s): Distinct Clusters Target Individuals of Interest to Russia

Sideloading on Android: What it is, why it’s risky, and how to do it more safely

A Google spokesperson announced on Reddit that it has started rolling out the first version of its Advanced Flow, designed to make installing apps from unverified developers safer. Let us explain what sideloading is, why Google Play is not 100% safe, what to look for when you’re sideloading so you can do it more safely, and how Google’s Advanced Flow helps with that. What is sideloading? Sideloading lets Android users install apps from outside Google Play. It can be useful, but it also creates…

Google US

19. 8. 17:09 · Malwarebytes Labs · Sideloading on Android: What it is, why it’s risky, and how to do it more safely

SPOJENO PŘES CVE Risolte vulnerabilità in Google Chrome

Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 15 nuove vulnerabilità di sicurezza, di cui 2 con gravità “critica” e 13 con gravità “alta”.

EPSS 0.01 CVE-2026-76033 CVE-2026-76034 CVE-2026-76035 CVE-2026-76036 CVE-2026-76037 CVE-2026-76038 CVE-2026-76039 CVE-2026-76040 CVE-2026-76041 CVE-2026-76042 CVE-2026-76043 CVE-2026-76044 CVE-2026-76045 CVE-2026-76046 CVE-2026-76047 Google IT FR

19. 8. 11:56 · CSIRT Itálie (ACN) · Risolte vulnerabilità in Google Chrome 19. 8. 02:00 · CERT-FR – avis · Multiples vulnérabilités dans Google Chrome (19 août 2026)

Be careful what you put in “anyone with the link” Google Docs

The next time you type something sensitive into a Google Doc—or any other online tool with a sharing feature—be careful about the permissions you grant. Speaking with The Register, the founder of QR generation service Pageloot said that he learned that the hard way. Siim Kostabi recalled how a contractor working for the company accidentally exposed login details for its staging environment—credentials that were never meant to leave an internal testing setup. The hapless developer had access to…

Google US

18. 8. 13:15 · Malwarebytes Labs · Be careful what you put in “anyone with the link” Google Docs

A week in security (August 10 – August 16)

Last week on Malwarebytes Labs: Apple now uses iPhone alerts for targets of mercenary spyware WhatsApp is testing a new warning for scam messages New Android malware lets criminals use your bank card in real time Parents take on Meta, TikTok, Google, and Snap in 3,000 youth safety lawsuits “Zoomsday” flaws could let one Zoom participant attack another Patch Tuesday: Update now to fix 421 flaws, including three zero-days Fake CCleaner installs GhostDesk Chrome spyware Valve warns Steam hardware…

Apple WhatsApp Google Meta US

17. 8. 09:01 · Malwarebytes Labs · A week in security (August 10 – August 16)

New Android malware lets criminals use your bank card in real time

Researchers at Group-IB have discovered a new NFC relay malware family, purpose-built to capture live card data via NFC and forward it in real time to attackers. They dubbed it “WindRelay.” NFC (Near Field Communication) is wireless technology that allows devices such as smartphones, payment cards, and payment terminals to communicate when they’re very close together. So, instead of stealing your physical bank card, the attackers capture NFC activity on an infected mobile phone and relay it in…

Google finance US

tg: varování tg: rozbor tp: malware tp: phishing tp: podvod

13. 8. 13:34 · Malwarebytes Labs · New Android malware lets criminals use your bank card in real time

Parents take on Meta, TikTok, Google, and Snap in 3,000 youth safety lawsuits

A group of big tech firms is fighting to stop roughly 3,000 youth safety lawsuits from moving forward, and they just lost a critical procedural battle in court. The lawsuits, brought by attorneys general and families, allege that Meta, Google, ByteDance’s TikTok, and Snap knew their products were addictive to children and teens and harmful to their mental health, but continued marketing them to young users for profit. The tech companies tried to appeal against a federal court ruling that…

Meta Google TikTok Snap média US

13. 8. 11:59 · Malwarebytes Labs · Parents take on Meta, TikTok, Google, and Snap in 3,000 youth safety lawsuits