Tag Google

Stellantis Confirms Data Breach Impacting Customer Information

Data Breach at Stellantis Exposes Customer Information Stellantis, a prominent multinational automaker with brands like Chrysler, Jeep, and Fiat, has reported a data breach that implicates customer information following unauthorized access to a third-party service provider. This incident raises significant concerns regarding data security practices within the automotive industry and…

Read MoreStellantis Confirms Data Breach Impacting Customer Information

Hackers Exploit Vulnerability in Krpano Framework to Inject Spam Ads on Over 350 Websites

A significant security vulnerability, identified as a cross-site scripting (XSS) flaw, has been exploited in a widely-used virtual tour framework, allowing cybercriminals to inject harmful scripts into hundreds of websites. This malicious activity aims to manipulate search results and promote spam advertising on a large scale. According to a report…

Read MoreHackers Exploit Vulnerability in Krpano Framework to Inject Spam Ads on Over 350 Websites

Google OAuth Flaw Exposes Millions Through Unsecured Startup Domains

Recent investigations have unveiled a serious vulnerability within Google’s “Sign in with Google” authentication system, which can be exploited through a peculiar loophole in domain ownership. This flaw potentially allows unauthorized users to access sensitive data associated with former employees of defunct companies. Dylan Ayrey, co-founder and CEO of Truffle…

Read MoreGoogle OAuth Flaw Exposes Millions Through Unsecured Startup Domains

Google’s March 2025 Android Security Update Addresses Two Actively Exploited Vulnerabilities

Google has published its March 2025 Android Security Bulletin, addressing a staggering total of 44 vulnerabilities. Among these, two high-severity vulnerabilities have been flagged as actively exploited in real-world settings. This ongoing risk emphasizes the necessity for business owners to maintain vigilance in their cybersecurity posture. The first vulnerability, identified…

Read MoreGoogle’s March 2025 Android Security Update Addresses Two Actively Exploited Vulnerabilities

NASA and Google Develop AI ‘Doctor in a Box’ for Space Missions

In a groundbreaking development, a new artificial intelligence-powered clinical decision support system is being designed by Google and NASA to assist astronauts in diagnosing and treating medical issues during space missions, even when they cannot communicate in real time with Earth. Chris Hein, field Chief Technology Officer at Google Public…

Read MoreNASA and Google Develop AI ‘Doctor in a Box’ for Space Missions

European Privacy Group Takes Legal Action Against TikTok and AliExpress for Unauthorized Data Transfers to China

The Austrian privacy advocacy organization None of Your Business (noyb) has filed formal complaints against several notable companies, including TikTok, AliExpress, SHEIN, Temu, WeChat, and Xiaomi, asserting that these firms have breached data protection regulations established by the European Union by inappropriately transferring user data to China. These complaints, lodged…

Read MoreEuropean Privacy Group Takes Legal Action Against TikTok and AliExpress for Unauthorized Data Transfers to China

Conti Group Members Launch Financially Driven Attacks on Ukraine

Recent investigations have uncovered the involvement of former Conti cybercrime group members in multiple campaigns targeting Ukraine from April through August 2022. According to Google’s Threat Analysis Group (TAG), these cyber operations reflect a strategic continuation of prior attacks against the Eastern European nation amidst the ongoing Russo-Ukrainian conflict. The…

Read MoreConti Group Members Launch Financially Driven Attacks on Ukraine

AsyncRAT Campaign Deploys Python Payloads and TryCloudflare Tunnels for Stealthy Attacks

Recent investigations have revealed a sophisticated malware campaign deploying a remote access trojan (RAT) called AsyncRAT, utilizing Python payloads and TryCloudflare tunnels for distribution. Forcepoint X-Labs researcher Jyotika Singh indicated that AsyncRAT capitalizes on the async/await programming model, allowing attackers to covertly access and manipulate infected systems, exfiltrate data, and…

Read MoreAsyncRAT Campaign Deploys Python Payloads and TryCloudflare Tunnels for Stealthy Attacks