UAT-11985 phishes Taiwan researchers with Google AitM kit
Cisco Talos details UAT-11985, an APT spear-phishing cluster hitting Taiwan research targets with AI-suspected event-invite lures and a real-time Google adversary-in-the-middle kit.
Stories tagged: #google
Google pauses OSS bug bounty submissions over AI-generated spam
Google has temporarily stopped accepting product submissions to its Open Source Software VRP, citing a surge of automated reports that are mostly invalid. Supply-chain reports continue.
Chrome ships fix for V8 zero-day CVE-2026-11645, CISA adds to KEV
Google's June 8 Stable Channel pushes 149.0.7827.102/.103 for an actively exploited V8 out-of-bounds read/write. CISA added the CVE to KEV the next day.
Android Framework zero-day CVE-2025-48595 added to CISA KEV
Google's June 2026 Android Security Bulletin fixes 124 flaws, including a Framework integer overflow under limited, targeted exploitation. CISA wants federal agencies patched by 5 June.