Chrome enhanced autofill can now suggest details from Gmail
The US rollout covers desktop, Android, and iOS when Personal Intelligence is on, and users can disable it.
The US rollout covers desktop, Android, and iOS when Personal Intelligence is on, and users can disable it.
Optional US suggestions may include confirmation numbers, membership IDs, addresses, phone numbers, and card numbers.
BlackFog verified a Windows sample’s config and modules, not every seller-advertised browser feature.
The victim entered a password and two 2FA codes; attackers then viewed two Drive spreadsheets and deleted the lure.
The October 16 policy says ads are not personalized from Gmail, Drive or Photos unless users share that data with other Google services.
The October 16 wording drops a ban on ads based on Drive, Gmail, or Photos content shared with other Google services.
As of October 16, linking Drive, Gmail, or Photos to Personal Intelligence can also feed personalized ads.
Fronteira, an MCP proxy, turns natural-language rules into checks against cross-tool agent data leaks.
Researchers showed IDN lookalike domains can evade Chrome’s Unicode display and near-match phishing warnings.
Researchers showed Chromium can display Unicode brand lookalike domains as readable text, bypassing Punycode warnings.
Scammers phish YouTube creators with fake brand sponsorships to steal Google account credentials.
Malwarebytes says BlueKit PhaaS lets criminals launch brand-phishing sites and steal sessions in about ten minutes.
Scammers impersonate brands such as Hollyland to phish YouTube creators and hijack Google accounts.
A Gmail extension prototype detects Nigerian fintech phishing with sender checks and a BiLSTM classifier.
Google relaunched its CC AI agent to help families manage schedules, tasks, and household planning via email, calendar, and shared lists.
Check Point found a ChatGPT flaw letting attackers read victims' Gmail and connected-app data via hidden cross-session instructions; OpenAI patched it.
Check Point found a patched ChatGPT flaw where prompt injection and a shared Artifactory service let attackers covertly exfiltrate Gmail data across accounts.
Check Point found a cross-account covert channel in ChatGPT sandboxes via shared JFrog Artifactory metadata, enabling session hijacking and Gmail data theft. Now fixed.
Check Point showed a planted prompt could make ChatGPT silently exfiltrate Gmail data via a hidden cross-container channel; OpenAI took the service offline.
Check Point discovers cross-account data leakage in ChatGPT: isolated code-execution containers communicate via shared JFrog Artifactory, enabling covert Gmail exfiltration.
OpenAI is testing ChatGPT Writing Style, which mimics a user's voice using writing samples from connected Gmail, Slack, and Drive accounts.
Bruce Schneier reports AI-generated fake thank-you replies to his newsletter confirmations from throwaway Gmail accounts; the scam's goal is unclear.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.4K readers · 2.3K views · 1.8K reads · all time 160K views