Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets
Security researchers at Novee Security have uncovered critical vulnerabilities in AI coding agents from Anthropic, Google, and OpenAI. The flaws allow an…
Tag: Google
CVE-2026-12537: Critical OS Command Injection in Gemini CLI
CVE-2026-12537 is a critical OS command injection vulnerability in Google's Gemini CLI container launcher. It allows an unprivileged attacker to execute arbitrary…
AI Recommendation Poisoning: How ‘Ask AI’ Buttons Silently Alter LLM Memory
A new class of prompt injection attack, dubbed "AI Recommendation Poisoning," is spreading across commercial websites. It exploits pre-filled deep links in…
AWS, Google, and Vercel Patch Agent Flaws Allowing Tool Execution Without Model Authorization
Security researchers have uncovered a class of vulnerabilities in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel that allow attackers…
Google ADK Vulnerabilities
Google's Agent Development Kit for Python had two vulnerabilities fixed in version 2.5.0: continuation forgery and resumable-mode bypass.
Fake Adobe and Zoom Updates Deliver ScreenConnect for Persistent Remote Access
Cybersecurity researchers have uncovered an active, multi-wave campaign that uses social engineering lures themed around Adobe and Zoom updates, business document reviews,…
Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent
Google has removed three AI agent workflows from its Agent Development Kit (ADK) Python repository after researchers at Pillar Security demonstrated that…
Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts
Unit 42 researchers have disclosed three attack paths against Google Password Manager in Chrome on Windows, which could allow malware already running…
Cheap Android TV Boxes Hijacked as Ad-Fraud Proxies: Fuyao Operation Exposed
Cybersecurity firm Bitsight has uncovered a large-scale operation dubbed 'Fuyao' involving cheap Android TV boxes that secretly impersonate smartphones to commit ad…
Chrome 149-151 Fix 1,442 Flaws, Surpassing Prior 23 Updates Combined
Google has patched a record 1,442 security vulnerabilities across Chrome versions 149, 150, and 151, surpassing the total number of flaws fixed…