Google privacy update may let Gmail data inform AI ads
The October 16 wording drops a ban on ads based on Drive, Gmail, or Photos content shared with other Google services.
48
Product
Google Drive
- Mentions · 7d0
- Mentions · 30d6
- All mentions15
- First seenAug 17, 2026
- Last mentioned7d ago
Timeline
15 articles · newest firstGoogle policy lets connected Gmail and Photos data inform ads
As of October 16, linking Drive, Gmail, or Photos to Personal Intelligence can also feed personalized ads.
58
Box tops a 2026 ranking of secure file-sharing platforms
The editorial list scores ten vendors on governance, usability, encryption, compliance evidence and pricing, with no lab testing.
18
Silent Ransom Group Allegedly Extorted $207 Million Without Encrypting Files
Silent Ransom Group allegedly took about $207 million from 27 law firms using phone social engineering, not encryption.
78
YouTubers targeted with fake sponsorships and “channel verification” phishing
Scammers phish YouTube creators with fake brand sponsorships to steal Google account credentials.
50
Inside a brand deal scam targeting YouTube creators
Scammers impersonate brands such as Hollyland to phish YouTube creators and hijack Google accounts.
52
CVE-2026-81914: Apache Airflow Google provider: Google Drive query injection via unescaped file and folder names
Apache Airflow Google provider before 22.6.0 allows Google Drive query injection via unescaped names (CVE-2026-81914).
30
N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
N0va phishkit targets US and EU organizations with trusted-brand lures, capturing tokens via legitimate authentication flows to gain SSO access to corporate resources.
58
Slack can now vibe-code interactive charts and reports inside chats
Slack launched Slackforce Surfaces, letting Slackbot build interactive dashboards, reports, and microsites directly inside chat channels.
45
New N0va Phishkit Targets North America and EU: A Growing Identity Risk for SOCs
ANY.RUN researchers uncovered the N0va phishkit targeting government, technology, consulting, and healthcare organizations across North America and the EU via device code phishing.
56
ChatGPT flaw lets attackers pull Gmail data across accounts via a hidden channel
Check Point found a ChatGPT flaw letting attackers read victims' Gmail and connected-app data via hidden cross-session instructions; OpenAI patched it.
66
ChatGPT can now connect to your personal apps to mimic writing style
OpenAI is testing ChatGPT Writing Style, which mimics a user's voice using writing samples from connected Gmail, Slack, and Drive accounts.
28
Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps
Varonis discloses CoSnitch (CVE-2026-24301), three Microsoft Copilot Personal flaws enabling one-click exfiltration of connected-app data; patched August 18, 2026.
66
TrickBot Campaign Uses Fake Payroll Emails to Conduct Phishing Attacks
TrickBot phishing campaign used SendGrid, fake Google Docs, and Drive-hosted downloaders disguised as Word files to deliver a credential-stealing payload.
50
UBoatRAT Navigates East Asia
Unit 42 discovers UBoatRAT, a new custom RAT targeting South Korean and video-game industry personnel, delivered via Google Drive with GitHub-based C2 and BITS persistence.
44
Related CVEs
by mentions- CVE-2026-243012%7.5Command Injection in Microsoft Copilot Allows Information Disclosure
- CVE-2026-24299<1%5.3Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information…
- CVE-2026-81914<1%4.3Google Drive query injection in Apache Airflow Google provider
Appears with
- Googlevendor · 8
- Gmailproduct · 6
- Microsoftvendor · 5
- SharePointproduct · 3
- OneDriveproduct · 3
- Microsoft Teamsproduct · 3
- Palo Alto Networksvendor · 2
- AI Modeproduct · 2
- ChatGPTproduct · 2
- Geminiai model · 2
- ChatGPTai model · 2
- DocuSignvendor · 2
- Nikeorganization · 2
- YouTubeproduct · 2
- ANY.RUNvendor · 2
- Dropboxvendor · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.