Security Update Backdoored Web Servers, Plus 3 Stories
A trusted cPGuard update backdoored Linux servers, while Google tied school Search access to AI controls and stolen cloud credentials drove huge AI bills.
Google Search, search features, publisher tools, and search-discovery changes.
A trusted cPGuard update backdoored Linux servers, while Google tied school Search access to AI controls and stolen cloud credentials drove huge AI bills.
Google’s AI connections can let permitted account data influence ad personalization. Plus actively exploited Nextcloud and VeloCloud flaws, and Meta’s delayed terms.
An AI agent shared a seller’s home address. Plus Office 2021 loses security updates and Google launches Universal Cart across Search and Gemini.
The FBI investigates a ShinyHunters breach claim, F5 patches an exploited BIG-IP zero-day, banks flag AI shopping risks, and BigCommerce reviews a third-party app breach.
Two popular WordPress plugins need security updates. Also: a BGP hijack pushed a malicious Virtualizor update, Dropbox accounts were breached through Lenovo ID, Google gives sites an AI Search opt-out, and Florida and Texas push back on Flock cameras.
Android car head units are being recruited into a proxy botnet, federal agencies warn about AI-assisted attacks on industrial controllers, OpenAI wants stronger California AI safeguards, Google gives publishers a new reader-retention tool, and Microsoft corrected yesterday’s Entra ID exploitation status.