-
- EXPLORAR
-
-
-
-
Google rolls back reCaptcha update to fix Firefox issues
May 3, 2024
01:07 PM
1
Google has rolled back a recent release of its reCaptcha captcha script after a bug caused the service to no longer work on Firefox for Windows.
Yesterday, BleepingComputer received multiple reports that reCaptcha stopped working in the latest version of Mozilla Firefox, with the issues also reported on Twitter and Reddit.
BleepingComputer tested reCaptcha on our devices and confirmed that the service no longer...
Google now pays up to $450-Thousand Dollars for RCE bugs in some Android apps
April 30, 2024
02:33 PM
0
Google has increased rewards for reporting remote code execution vulnerabilities within select Android apps by ten times, from $30,000 to $300,000, with the maximum reward reaching $450,000 for exceptional quality reports.
The company made these changes to the Mobile Vulnerability Rewards Program (Mobile VRP) and they apply to what it describes as Tier 1 applications.
The list of in-scope apps includes Google Play Services,...
Google rejected 2.28 million risky Android apps from Play store in 2023
April 29, 2024
12:00 PM
0
Google blocked 2.28 million Android apps from being published on Google Play after finding various policy violations that could threaten user's security.
Additionally, the tech giant reports that it identified and blocked 333,000 Google Play accounts that uploaded malware, fraudulent apps, or engaged in repeated grave policy violations.
For comparison, in 2022, Google blocked 1.5 million "bad"...
Google Meet opens client-side encrypted calls to non Google users
April 24, 2024
11:44 AM
0
Google is updating the client-side encryption mechanism for Google Meet to allow external participants, including those without Google accounts, to join encrypted calls.
Client-side encryption ensures that only people in the meeting have access to the data delivered through the application.
Google Meet is part of the Google Workspace suite and provides users with secure video meetings and calls over the internet. The app has...
Chrome Enterprise gets Premium security but you have to pay for it
April 10, 2024
03:52 PM
1
Google has announced a new version of its browser for organizations, Chrome Enterprise Premium, which comes with extended security controls for a monthly fee per user.
The product is a step up from Chrome Enterprise, now demoted to Chrome Enterprise Core, and provides threat and data protection, increased control options, and reporting capabilities.
Extra security at a cost
Google’s new security-enhanced alternative for...
Google fixes two Pixel zero-day flaws exploited by forensics firms
April 3, 2024
10:47 AM
1
Google has fixed two Google Pixel zero-days exploited by forensic firms to unlock phones without a PIN and gain access to the data stored within them.
Although Pixels run Android, they receive separate updates from the standard monthly patches distributed to all Android device OEMs. This is due to their unique hardware platform, over which Google has direct control, and the exclusive features and capabilities.
While the April...
Google fixes one more Chrome zero-day exploited at Pwn2Own
April 3, 2024
12:39 PM
0
Google has fixed another zero-day vulnerability in the Chrome browser, which was exploited by security researchers during the Pwn2Own hacking contest last month.
Tracked as CVE-2024-3159, this high-severity security flaw is caused by an out-of-bounds read weakness in the Chrome V8 JavaScript engine.
Remote attackers can exploit the vulnerability using crafted HTML pages to gain access to data beyond the memory buffer via...
Google agrees to delete Chrome browsing data of 136 million users
April 2, 2024
01:07 PM
0
Google has agreed to delete billions of data records collected from 136 million Chrome users in the United States, as part of a lawsuit settlement regarding alleged undisclosed browser data collection while in Incognito mode.
The case concerns a class-action lawsuit filed in June 2020 against Google, targeting the inadequate disclosure of data collection practices and lack of privacy controls in Chrome's Incognito mode.
The...
New Chrome feature aims to stop hackers from using stolen cookies
April 2, 2024
02:08 PM
2
Google announced a new Chrome security feature called 'Device Bound Session Credentials' that ties cookies to a specific device, blocking hackers from stealing and using them to hijack users' accounts.
Cookies are files that websites use to remember your browsing information and preferences and automatically log you into a service or website. These cookies are created after you log into a service and verify multi-factor...
Google Podcasts service shuts down in the US next week
March 29, 2024
11:03 AM
0
U.S. users have just a few more days to make the transition from Google Podcasts as the company moves forward with the process of discontinuing the service globally.
Google is currently sending in-app notifications to users in the U.S. that starting April 2nd they will no longer be able to use Google Podcasts and is recommending to export subscriptions to YouTube Music.
The Google Podcasts streaming service launched...
Google's new AI search results promotes sites pushing malware, scams
March 25, 2024
07:32 AM
1
Google's new AI-powered 'Search Generative Experience' algorithms recommend scam sites that redirect visitors to unwanted Chrome extensions, fake iPhone giveaways, browser spam subscriptions, and tech support scams.
Earlier this month, Google began rolling out a new feature called Google Search Generative Experience (SGE) in its search results, which provides AI-generated quick summaries for search queries,...
Google engineer caught stealing AI tech secrets for Chinese firms
March 7, 2024
09:56 AM
0
The U.S. Department of Justice (DoJ) has announced the unsealing of an indictment against Linwei (Leon) Ding, 38, a former software engineer at Google, suspected of stealing Google AI trade secrets for Chinese companies.
The charges allege that Ding stole proprietary information about Google's artificial intelligence (AI) technologies and transferred it to two companies based in China, where he secretly worked.
The...
Google Pay app shutting down in US, users have till June to move fund
February 23, 2024
01:46 PM
0
Google is retiring the standalone Pay app in the United States. Users have until June 4 to transfer the balance to bank accounts.
Google Pay is a secure mobile wallet that lets users send money to businesses or friends, make online purchases, pay bills, and earn rewards that translate to cash-backs or discounts.
The app has over a billion downloads on Google Play and is used by people across 180 countries on various...
Hackers abuse Google Cloud Run in massive banking trojan campaign
February 21, 2024
04:07 PM
0
Security researchers are warning of hackers abusing the Google Cloud Run service to distribute massive volumes of banking trojans like Astaroth, Mekotio, and Ousaban.
Google Cloud Run is lets users deploy frontend and backend services, websites or applications, handle workloads without the effort of managing an infrastructure or scaling.
Cisco Talos researchers observed a massive uptick in the misuse of...
Anatsa Android malware downloaded 150,000 times via Google Play
February 19, 2024
08:34 AM
1
The Anatsa banking trojan has been targeting users in Europe by infecting Android devices through malware droppers hosted on Google Play.
Over the past four months, security researchers noticed five campaigns tailored to deliver the malware to users in the UK, Germany, Spain, Slovakia, Slovenia, and the Czech Republic.
Researchers at fraud detection company ThreatFabric noticed an increase of Anatsa activity since November,...
Mais Artigos
Leia Mais
Over 28,500 Exchange servers vulnerable to actively exploited bug
February 19, 2024
01:46 PM
0
Up to 97,000 Microsoft Exchange...
Raspberry Robin malware evolves with early access to Windows exploits
February 10, 2024
10:11 AM
0
Recent versions of...
Windows February 2024 updates fail to install with 0x800F0922 errors
February 27, 2024
02:52 AM
2
Microsoft says the February 2024...
Windows 11, Tesla, and Ubuntu Linux hacked at Pwn2Own Vancouver
March 21, 2024
03:07 AM
1
On the first day of Pwn2Own...
Mozilla fixes two Firefox zero-day bugs exploited at Pwn2Own
March 22, 2024
01:45 PM
2
Mozilla has released security...
© 2024 AFFA Social Underground Portuguese