Google Threat Intelligence
24 briefings written from Google Threat Intelligence's reporting, newest first. Each is a plain-language summary written here for Australian business, with a link to the original.
- LLMJacking: Criminals Are Hijacking Business AI Access and Running Up Six-Figure Bills in Hours
- Google Disrupts XCPE Botnet Built Into 1.3 Million Set-Top Boxes by the Manufacturer
- Attackers Are Turning AI Agents Into Automated Intrusion Tools, Google Warns
- Suspected State-Linked Hackers Exploited BeyondTrust Remote Support Flaw Before a Fix Existed
- Hackers Tampered With AOMEI Software Updates in Brief Bursts to Dodge Detection
- AI Is Supercharging Vulnerability Discovery, and Attackers Are Keeping Pace
- AI Is Doubling the Pace of Vulnerability Discovery, and Attackers Are Keeping Up
- Citrix NetScaler Zero-Day Under Active Attack: What Businesses Need to Know
- Zero-Day Attacks Hitting Citrix NetScaler Devices: What Businesses Need to Know
- ShinyHunters Return to Oracle PeopleSoft With a Simple Trick That Slips Past Firewalls
- Google Warns: Attackers Are Targeting Your Software Build Pipelines
- Attackers Are Targeting the Tools Developers Trust: Google Urges Stronger Defences for Software Build Pipelines
- Attackers Are Handing the Work to AI Agents, and Defenders Have Less Time to Respond
- AI-Powered Attacks Are Speeding Up: Google Warns of Autonomous Hacking Campaigns
- BREEZE COMET: Brazilian Payment Systems Targeted by Financially Motivated Hackers Using Custom Malware
- Brazil-Focused Fraud Group 'BREEZE COMET' Targets Banks and Payment Systems, With AI Now in the Mix
- Russian State-Linked Hackers Exploit Login Systems to Target High-Profile Individuals
- Russian Espionage Groups Trick Targets Into Handing Over Account Access Through Legitimate Login Processes
- Google's Mandiant Uses AI Agents to Find Code Flaws Before Attackers Do
- Google Uses AI-Powered Code Review to Outpace Attackers Exploiting Stolen Source Code
- Same Scammers, New Names: Vishing Extortion Gang Rebrands to Evade Detection
- Fake IT Helpdesk Calls Continue as Extortion Group Splits Into Multiple Brands
- Exposed Cloud Functions: A Growing Entry Point for Attackers
- Manually Rotated ADFS Certificates Can Leave 'Ghost' Signing Keys Exposed