Vulnerabilities
Patch Google Agent Mesh to Stop Unauthenticated Remote Service Access
A critical flaw in early Google SAM builds allows remote peers to bypass security checks and trigger backend services without valid credentials.
Everything Shell Bulletin has reported about Google: 4 stories, newest first. Part of our Cyber Attacks coverage.
Cyber Attacks
Verify Event Invites to Stop UAT-11985 Credential Theft
UAT-11985 uses AI-crafted fake event invites and quishing to steal Google credentials and MFA codes from Taiwan research staff.
Vulnerabilities
Verify AI Key Usage Immediately to Stop Criminals From Using Your Budget for Scans
Criminals are using stolen API keys from major providers to run autonomous scanning tools, forcing the key owners to pay for the attack costs.
Cyber Attacks
Update Google Dev Sites: Flask Session Forgery RCE Patched After OAuth Secret Misuse
A researcher showed how forged Flask sessions on Google’s developer sites could run remote code. The vendor fixed the issue and paid a reward.