Google is extending Chrome Enhanced Protection in Safe Browsing with a server-side Gemini model that detects deceptive websites. It also adds warnings when users copy suspicious ClickFix commands. Google claims Enhanced Protection makes users ten times safer from phishing, social engineering, notification abuse and other scams than Standa…
Google announced new Chrome protections against scams and social engineering. They include a two-level Safe Browsing site warning, server-side Gemini scam analysis and detection of ClickFix commands. The Gemini and ClickFix features are part of Enhanced Protection, the Safe Browsing mode introduced in 2020, which Google said last year had…
Google has updated Chrome with new scam protections for users running Enhanced Protection mode in Safe Browsing. The browser now distinguishes suspicious sites from known dangerous ones and shows a milder, dismissible warning for the former. Gemini-based detection now also covers fake antivirus and fake browser update scams, beyond the te…
Google is rolling out Gemini Personal Intelligence on Android Auto, letting the Gemini assistant draw on a user's Gmail, Calendar, Photos and other Google services to tailor in-car responses. The feature is opt-in and off by default, and users can choose which apps and services to permit. The article reports no vulnerability, attack or in…
Google announced on 20 October 2026 that it is upgrading the Gemini assistant in vehicles with a Personal Intelligence feature. The feature draws on data from Gmail, Google Calendar, YouTube, Maps, Google Search history and other connected Google services. It launches today in Android Auto and will reach cars with Google Built-in in the c…
Malone Lam, a 22-year-old Singaporean who used the aliases "Anne Hathaway", "$$$" and "King Greavy", has pleaded guilty to leading a group that stole more than US $245 million in cryptocurrency from victims across the United States. According to the US Department of Justice, the group operated from October 2023 to May 2025 and recruited a…
Google announced Universal Cart and the When to Buy Guide, two consumer shopping features ahead of the holiday season. Universal Cart saves products from multiple retailers via AI Mode in Search or the Gemini app. It tracks price drops and restocks using the Shopping Graph (60+ billion product listings). It is built on Google Wallet, inte…
Google announced that anyone with a standard Google account can now build personal Android apps in Google AI Studio by describing them in a prompt. The apps run on the creator's own device, are launched from a private section of Google Play, and are not listed in the public Play Store. The feature extends the existing AI Studio app creato…
CERT-FR advisory CERTFR-2026-AVI-1329, published 16 October 2026, reports multiple vulnerabilities in Google Chrome. The advisory says they allow an attacker to cause a security problem that the vendor has not specified. It covers 15 CVEs and refers to the Google security bulletins of 15 October 2026 for the fixes. It gives no exploitatio…
The Cyber Security Agency of Singapore (CSA) and Google convened policymakers, critical infrastructure leaders and AI safety experts on Oct. 14 at Singapore International Cyber Week 2026. The tabletop exercise examined security risks from increasingly autonomous AI agents that act at machine speed. Participants concluded that perimeter de…
The Wiz Customer Incident Response Team (CIRT) reports a rising pattern of LLMjacking in which threat actors compromise privileged Google Cloud Platform (GCP) users solely to offload the cost of large-scale LLM inference onto the victim. Attackers link external, attacker-controlled GCP projects to the victim's billing account, so all Gemi…
Palo Alto Networks published advisory PAN-SA-2026-0013, its monthly Chromium vulnerability update for October 2026. It states that Prisma Browser is affected by vulnerabilities fixed in recent upstream Chromium Stable Channel releases. The vendor rates severity HIGH with suggested urgency MODERATE. Palo Alto Networks is not aware of any m…
CERT-FR advisory CERTFR-2026-AVI-1308, published on 14 October 2026, reports multiple vulnerabilities in Google Chrome. Google released the corresponding security bulletins on 13 October 2026 for the Stable and Extended Stable desktop channels. The advisory says only that an attacker could cause a security issue "not specified by the vend…
Microsoft, working with industry partners and Japanese police, disrupted a Chinese-language phishing-as-a-service (PhaaS) ecosystem centered on Yam Store, an underground marketplace tracked as Storm-3119. The phishing kits sold there were responsible for over a billion phishing emails and texts sent to more than 75,000 organizations since…
OpenAI announced an expanded ChatGPT integration for Google Chrome with two workflows. "Chat" reads content from open tabs to inform answers. "Work" controls tabs to send messages, fill out forms, download files, and organize or group tabs. The article presents this as a change that combines browser visibility with delegated actions, rais…
GreyNoise announced an updated integration with Google Security Operations that brings its internet-scanner classification data into the SIEM/SOAR platform. The aim is to separate mass-scanning noise from activity targeting the customer's own environment. GreyNoise says it observes over 800,000 unique IPs daily across 5,000+ sensors in 80…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-16 based on evidence of active exploitation: CVE-2026-58704, an improper authorization vulnerability in Google Pixel. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the feder…
Apple tightened its App Store developer guidelines over the weekend to ban apps that use AI to create offensive content. The update also targets apps that pass review as ordinary apps and later turn into nudify apps or surface those features prominently (a bait-and-switch tactic). Apps hosting user-generated content must filter objectiona…
Amazon announced three Android-based Alexa Tablets (Tablet 8 from $230, Tablet 11 from $330, Tablet 12 Pro from $500) built around the Alexa+ AI assistant, with shipping set to start on October 14. They are the first of Amazon's newer tablets to support Google Play in addition to Amazon's own app store. Amazon also launched two Kids Table…
Cisco Talos disclosed an APT spear-phishing and quishing campaign, tracked as UAT-11985, that targets individuals affiliated with Taiwan research organizations. First seen in mid-2026, it uses fake event invitations to lead victims to an adversary-in-the-middle (AitM) phishing framework that harvests Google account credentials and MFA cod…