Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Researcher Found XSS Flaws In Google Cloud and Google Play
A security researcher found severe cross-site scripting (XSS) vulnerabilities in Google Cloud and Google Play.…Researcher Found XSS Flaws In Google Cloud and G…
Severe Flaw in Google Cloud's Cloud SQL Service Exposed Confidential Data
A new security flaw has been disclosed in the Google Cloud Platform's (GCP) Cloud SQL service that could be potentially exploited to obtain access to confident…
Bad.Build Flaw in Google Cloud Build Raises Concerns of Privilege Escalation
Cybersecurity researchers have uncovered a privilege escalation vulnerability in Google Cloud that could enable malicious actors tamper with application images…
Researchers Reveal ConfusedFunction Vulnerability in Google Cloud Platform
Cybersecurity researchers have disclosed a privilege escalation vulnerability impacting Google Cloud Platform's Cloud Functions service that an attacker could …
A Google Cloud Build Vulnerability Could Aid Supply-Chain Attacks
Researchers found a critical vulnerability in the Google Cloud Build that allowed elevated privileges to…A Google Cloud Build Vulnerability Could Aid Supply-Ch…
GhostToken Flaw Could Let Attackers Hide Malicious Apps in Google Cloud Platform
Cybersecurity researchers have disclosed details of a now-patched zero-day flaw in Google Cloud Platform (GCP) that could have enabled threat actors to conceal…
Researcher Earns $10K Bounty For A Google Cloud Project SSRF Flaw
A security researcher has recently found a flaw in Google Cloud Project that allows for…Researcher Earns $10K Bounty For A Google Cloud Project SSRF Flaw on La…
Google Award $10K Bounty For Google Maps Bug And Patch Bypass
A serious XSS vulnerability was discovered in Google Maps. Upon report, Google originally patched the vulnerability, however it was laterGoogle Award $10K Boun…
Vertex AI Vulnerability Exposes Google Cloud Data and Private Artifacts
Cybersecurity researchers have disclosed a security "blind spot" in Google Cloud's Vertex AI platform that could allow artificial intelligence (AI) agents to b…
Fake Google Authenticator Sites Exploit Google Ads To Deliver Malware
Researchers have spotted a new malware campaign where the hackers exploit Google Ads to sponsor…Fake Google Authenticator Sites Exploit Google Ads To Deliver M…
Hackers Could Exploit Google Workspace and Cloud Platform for Ransomware Attacks
A set of novel attack methods has been demonstrated against Google Workspace and the Google Cloud Platform that could be potentially leveraged by threat actors…
Cloudflare DDoS Protection Flaws Allowed Security Bypass Via Cloudflare
Although Cloudflare provides resilient DDoS protection, a researcher devised a strategy to bypass the security…Cloudflare DDoS Protection Flaws Allowed Securit…
Hackers Using Compromised Google Cloud Accounts to Mine Cryptocurrency
Threat actors are exploiting improperly-secured Google Cloud Platform (GCP) instances to download cryptocurrency mining software to the compromised systems as …
Researchers Disclose Google Gemini AI Flaws Allowing Prompt Injection and Cloud Exploits
Cybersecurity researchers have disclosed three now-patched security vulnerabilities impacting Google's Gemini artificial intelligence (AI) assistant that, if s…
GCP Cloud Composer Bug Let Attackers Elevate Access via Malicious PyPI Packages
Cybersecurity researchers have detailed a now-patched vulnerability in Google Cloud Platform (GCP) that could have enabled an attacker to elevate their privile…
Cloud Atlas Deploys VBCloud Malware: Over 80% of Targets Found in Russia
The threat actor known as Cloud Atlas has been observed using a previously undocumented malware called VBCloud as part of its cyber attack campaigns targeting …
Malware Delivery via Cloud Services Exploits Unicode Trick to Deceive Users
A new attack campaign dubbed CLOUD#REVERSER has been observed leveraging legitimate cloud storage services like Google Drive and Dropbox to stage malicious pay…
Google Cloud Resolves Privilege Escalation Flaw Impacting Kubernetes Service
Google Cloud has addressed a medium-severity security flaw in its platform that could be abused by an attacker who already has access to a Kubernetes cluster t…
GhostToken Zero-Day Vulnerability Found In Google Cloud
A severe zero-day vulnerability, identified as the “GhostToken” flaw, could allow an adversary to infect…GhostToken Zero-Day Vulnerability Found In Google Clou…
Kinsing Actors Exploiting Recent Linux Flaw to Breach Cloud Environments
The threat actors linked toKinsinghave been observed attempting to exploit the recently disclosed Linux privilege escalation flaw called Looney Tunables as par…
SUSE google-cloud-sap-agent Important Denial of Service Vuln 2026-4206-1
An update that solves four vulnerabilities and has one security fix can now be installed.
SUSE 16.0 Google Cloud SAP Agent Vital Update Resolving Four Security Flaws
An update that solves four vulnerabilities and has one fix can now be installed.
SUSE Google Cloud SAP Agent Important Fix DoS Memory Issues 2026-23729-1
An update that solves four vulnerabilities and has one fix can now be installed.
SUSE google-cloud-sap-agent Important Heap Exhaustion DoS Vuln 2026-4178-1
An update that solves four vulnerabilities and has one security fix can now be installed.