Google: Hackers used AI to develop zero-day exploit for web admin tool By Bill Toulas May 11, 2026 09:02 AM Researchers at Google Threat Intelligence Group GTIG say that a zero-day exploit targeting a popular open-source web administration tool was likely generated using AI. …
… Download Now Related Articles: Google fixes one actively exploited Android zero-day, 124 flaws Android 17 to expand banking scam call and privacy protections Google now offers up to $1.5 million for some Android exploits Telegram Mini Apps abused for crypto scams, Android malware delivery OpenAI up… …
… The framework was tested with two models, namely Google Gemini 3.1 Pro and OpenAI GPT-5.4. “Varonis Threat Labs explored whether the same phishing techniques that have tricked humans for decades would also work on the AI agents working on their behalf,” reads the report . “We created an OpenClaw AI… …
… Most AI tools request access to Google Workspace or Microsoft 365 through OAuth, which grants them read or write permissions to corporate data. A quarterly audit of connected third-party apps, sorted by permission scope, usually surfaces dozens of tools the security team never reviewed. …
… Download Now Related Articles: Ukraine identifies infostealer operator tied to 28,000 stolen accounts Paid AI Accounts Are Now a Hot Underground Commodity Hackers abuse Google ads, Claude.ai chats to push Mac malware Australia warns of ClickFix attacks pushing Vidar Stealer malware Fake Claude AI w… …
… According to the researchers, GreyVibe has used several attack chains against its targets, including: PhantomMail: Spear-phishing emails delivering malicious ZIP/RAR archives via Google Drive and 4sync links, using decoy PDFs or fake errors while deploying malware. …
… A Google spokesperson was not immediately available for comment when BleepingComputer reached out for more details regarding the CVE-2025-48595 attacks and their targets. …
Hackers abuse Google ads for GoDaddy ManageWP login phishing By Bill Toulas May 6, 2026 05:36 PM A phishing campaign delivered through Google sponsored search results is targeting credentials for ManageWP, GoDaddy’s platform for managing fleets of WordPress websites. …
… Today, employees commonly use Google Workspace, Microsoft 365, or Salesforce; developers utilize GitHub, Jira, and internal web apps; and many departments now embrace AI tools like ChatGPT and copilots. …
… Earlier today, OpenAI also confirmed that the TanStack supply-chain impacted systems of two of its employees who had access to “a limited subset of internal source code repositories.” A small set of credentials was stolen from the repositories, but the investigation found no evidence that they wer… …