AI
Claude in Chrome Exploit Lets Attackers Steal Gmail Codes and Take Over Slack, X, and Claude.ai Accounts
Security researchers have demonstrated an indirect prompt-injection chain affecting Claude in Chrome that can transform a standard request, such as summarizing recent emails, into a cross-account takeover scenario.
The...
cyber security
Umbrij Malware Lets ToddyCat Hackers Hijack Gmail Accounts Through Google API Abuse
A targeted campaign in which the ToddyCat (aka APT-style) group leverages a previously observed loader family, Umbrij, to hijack Gmail accounts by abusing Google...
cyber security
ToddyCat Uses Shadow Token via Remote Debug to Compromise Gmail Accounts
ToddyCat, an advanced persistent threat group long associated with targeted espionage against corporate environments, has evolved its toolkit to exploit OAuth-based authorization flows and...
APT
Ghostwriter APT Uses Fake Gmail Login Panels to Steal Passwords and 2FA Codes
Ghostwriter (UNC1151) has escalated its long-standing phishing operations by deploying convincing fake Gmail login panels that harvest both passwords and two-factor authentication (2FA) codes,...
cyber security
Google Brings End-to-End Encrypted Gmail to Android and iPhone
Google has officially expanded Gmail’s end-to-end encryption (E2EE) feature to Android and iOS devices, empowering organizations and users to protect the confidentiality of email content...
Cyber Security News
Google Introduces Advanced Ransomware Defense and Recovery Features in Drive
Google has officially moved its advanced ransomware detection and file restoration features for Google Drive out of beta, making them generally available to organizations...
Cyber Security News
Massive Data Leak: 48M Gmail and 6.5M Instagram Entries Found in Open Database
A massive data breach containing 149 million stolen login credentials left exposed online without password protection or encryption.
The database, contained 96 GB of...
CVE/vulnerability
New ChatGPT Vulnerabilities Enable Data Exfiltration from Gmail, Outlook, and GitHub
New research has revealed a set of critical weaknesses in how ChatGPT interacts with external services and its own memory system, creating new paths...
Cyber Security News
Gmail to End POP3 Mail Fetching for External Email Accounts
Google has announced a significant change to Gmail that will impact users who manage multiple email accounts through a single inbox.
Starting January 2026,...
Cyber Security News
Google Introduces Option to Change @gmail.com Email Addresses
For years, Google users have been stuck with the email addresses they created when they first signed up.
If you picked an embarrassing username...
AI
Gemini Zero-Click Flaw Let Attackers Access Gmail, Calendar, and Google Docs
A critical vulnerability in Google Gemini Enterprise and Vertex AI Search, dubbed GeminiJack, that allows attackers to exfiltrate sensitive corporate data without any user interaction...