Friday, November 6, 2026

Google

Google Gemini to Gain Full Computer Access With New Permission

Google is reportedly testing a new Gemini Desktop feature that could give its AI agent extensive control over a user’s Mac. This includes access...

Google Tightens Open-Source Bug Bounty Rules After Surge in AI-Generated Vulnerability Reports

Google has stopped accepting new "product vulnerability" reports through its Open Source Software Vulnerability Reward Program (OSS VRP) due to a significant increase in...

Google PageBreak AI Agent Finds Over 500 XSS Vulnerabilities Across Its Web Applications

Google has disclosed that PageBreak, an internal AI security agent developed by its Product Security team, has identified and validated more than 500 cross-site...

Google Chrome 154 Update Fixes 32 Security Flaws Including Critical ANGLE Bug

Google has released Chrome version 154 for desktop platforms, addressing 32 security vulnerabilities, including a critical buffer overflow flaw in the ANGLE graphics translation...

Fake Firefox Extension Hijacks Google Accounts Without Stealing Passwords First

A malicious Firefox extension masquerading as a PDF identity-verification utility has been found targeting Google accounts through session-cookie theft and automated account-takeover activity. The...

Google Gemini AI Hacked 3 Real Companies After Cybersecurity Test Exposed It to Internet

Google has confirmed that its Gemini artificial intelligence model accidentally accessed protected systems belonging to three real companies during a cybersecurity evaluation. The incident...

Google Search Makes It Harder to See Where a Link Really Goes Before You Click

Google has begun routing some organic Search result links through opaque google.com/goto?url=... redirects, reducing users’ ability to independently inspect a destination URL before clicking....

Google Chrome V8 Flaw Actively Exploited in the Wild, Update Released

Google has released an urgent update for Chrome Stable to address CVE-2026-85046, a high-severity type confusion vulnerability in the V8 JavaScript and WebAssembly engine...