The vulnerabilities allowed public access to restricted, sealed and confidential court filings using only a web browser. Witness lists and testimony, mental health evaluations, detailed allegations of abuse and corporate trade secrets. These are some of the sensitive legal court filings that security researcher Jason Parker said they found exposed to the open internet for anyoneContinue reading “Security flaws in court record systems used in five US states exposed sensitive legal documents.”
Category Archives: google
Gmail’s AI-powered spam detection is its biggest security upgrade in years.
Gmail’s spam filters can now understand “adversarial text manipulations.” The latest post on the Google Security blog details a new upgrade to Gmail’s spam filters that Google is calling “one of the largest defense upgrades in recent years.” The upgrade comes in the form of a new text classification system called RETVec (Resilient & Efficient Text Vectorizer).Continue reading “Gmail’s AI-powered spam detection is its biggest security upgrade in years.”
The Tyranny of Consistency.
Consistency is helpful as a tool for designing user-friendly experiences. Until it isn’t. In a recent post on LinkedIn, design system consultant Brad Frost referenced Google’s notoriously baffling 2020 changes to the icons for its popular apps, simply noting, “All this time later, I still consider this decision to be a big mistake.” Erica Hall, co-founder of Mule DesignContinue reading “The Tyranny of Consistency.”
Apple fixes two new iOS zero-days in emergency updates.
Apple released emergency security updates to fix two zero-day vulnerabilities exploited in attacks and impacting iPhone, iPad, and Mac devices, reaching 20 zero-days patched since the start of the year. “Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1,” the company said in an advisory. TheContinue reading “Apple fixes two new iOS zero-days in emergency updates.”
Google Will Start Deleting Old Accounts This Week. Here’s How to Save Your Google Account.
Don’t wait: You’ll need to take several steps to keep your inactive Google account safe from deletion. Act now if you want to keep your old Google accounts. Starting this week, on Dec. 1, Google will start deleting inactive Google accounts, it said, and all their contents, including Gmail messages, Photos, Calendar appointments, Contacts records, YouTubeContinue reading “Google Will Start Deleting Old Accounts This Week. Here’s How to Save Your Google Account.”
Beware: Malicious Google Ads Trick WinSCP Users into Installing Malware.
Threat actors are leveraging manipulated search results and bogus Google ads that trick users who are looking to download legitimate software such as WinSCP into installing malware instead. Cybersecurity company Securonix is tracking the ongoing activity under the name SEO#LURKER. “The malicious advertisement directs the user to a compromised WordPress website gameeweb[.]com, which redirects the userContinue reading “Beware: Malicious Google Ads Trick WinSCP Users into Installing Malware.”
What’s a zero-day attack (and how can you prepare for one)?
Zero-day attacks are especially difficult to defend against because by their very nature, no one sees them coming. On Nov. 24, 2021, an Alibaba Cloud Security engineer noticed that a certain string of text, when inserted into Java’s logging utility Log4j, could execute remote code. Cue the alarms, as vendors, security experts, and end-users spread theContinue reading “What’s a zero-day attack (and how can you prepare for one)?”
The Dangers of Google’s .zip TLD.
Can you quickly tell which of the URLs below is legitimate and which one is a malicious phish that drops evil.exe? https://github.com∕kubernetes∕kubernetes∕archive∕refs∕tags∕@v1271.zip https://github.com/kubernetes/kubernetes/archive/refs/tags/v1.27.1.zip This week, Google launched a new TLD or “Top Level Domain” of .zip, meaning you can now purchase a .zip domain, similar to a .com or .org domain for only a fewContinue reading “The Dangers of Google’s .zip TLD.”
Even Google CEO Sundar Pichai doesn’t understand Google’s privacy controls.
Pichai told Congress users could “clearly see” what data Google is collecting. No one in the world seems to know how Google’s privacy controls work, and the company probably likes it that way. The latest example is from Rodriguez v. Google, an ongoing 2021 class-action lawsuit over Google’s infamous “Web & App Activity” privacy check box. TheContinue reading “Even Google CEO Sundar Pichai doesn’t understand Google’s privacy controls.”
Google was accidentally leaking its Bard AI chats into public search results.
Conversations with the Google chatbot turned up in search results for common queries—an issue the company says was an error. AI-powered chatbots are designed to be the always-available advisors that will power the next era of productivity. But they have a privacy problem—as evidenced by a recent misstep by Google. The search giant, which developed its Bard AI chatbot inContinue reading “Google was accidentally leaking its Bard AI chats into public search results.”
You must be logged in to post a comment.