CISA releases ScubaGear 2.0 and ScubaGoggles 1.1.0
ScubaGear now calls Microsoft 365 REST APIs directly, and ScubaGoggles adds an assured baseline plus Gemini controls.
36
Product
Google Workspace
- Mentions · 7d4
- Mentions · 30d16
- All mentions29
- First seenAug 19, 2026
- Last mentioned3d ago
Timeline
29 articles · newest firstCISA offers free ScubaGear and ScubaGoggles cloud configuration assessment tools
ScubaGear checks Microsoft 365 with PowerShell and Rego; alpha ScubaGoggles may misreport Google Workspace settings.
42
CISA’s ScubaGear and ScubaGoggles check cloud security settings
The existing SCuBA tools report configuration gaps in Microsoft 365 and Google Workspace but do not change tenant settings.
34
Ex-Meta AI director launches Ndoc to challenge Office and Workspace
Ndoc is in an enterprise pilot and limited alpha; Patel plans a beta in weeks and a full launch next year.
42
Microsoft ties ConnectWise backup abuse to Storm-0940 and ARTEX
Sign-in attempts hit 2,900 a minute, with more than 111,000 failures on October 11 alone.
82
Hackers disguise phishing as promising business opportunities
Fortra tracked a twelvefold rise in RFQ phishing that steals business credentials, MFA data, and sessions.
66
Bring Your Own Agent: Your Employees' Assistants Are Already Logged In
Employees are linking personal AI agents to corporate apps through OAuth, passwords, and API tokens, creating unmanaged identity risk.
46
Risky Bulletin: ShinyHunters suspects arrested in US and Jordan
Roundup: hackers stole data on 8.8 million Danes, and Oracle confirmed a 20-million-patient health breach.
86
Google brings agentic AI to Gemini, starting with businesses
Google launched a Gemini enterprise agent that plans work and acts across business systems.
74
Google is launching a one-stop Gemini agent for your work tasks
Google is privately previewing a Gemini Enterprise agent that performs work tasks across Workspace and other apps.
61
OAuth grants pile up faster than you can review them. Here's how to keep up.
Nudge Security markets an agent that inventories and scores risky SaaS OAuth grants teams cannot review manually.
26
Nikkei Discloses Two Employee Cloud Account Compromises
Nikkei says two employee cloud accounts were hijacked, exposing contacts and sending about 9,000 phishing emails.
63
Nikkei discloses breaches of employees’ Microsoft, Google email accounts
Nikkei says attackers breached Google and Microsoft employee email accounts and sent 9,000 phishing emails.
58
Japanese media group Nikkei discloses cyberattack targeting journalistic sources
Nikkei says a hijacked Microsoft 365 account sent about 9,000 phishing emails, including to journalistic sources.
76
The latest AI news we announced in September 2026
Google's September recap centers on Gemini 4 Argon, a million-token frontier model for cybersecurity defense via the Fairwind Program.
90
12 Best SSO Solutions Compared (2026): Features & Pricing
A 2026 comparison ranks 12 SSO platforms, favoring Microsoft Entra ID for Microsoft 365 and Okta for mixed SaaS.
22
Cloudflare OS: your company’s agent workspace, managed for you
Cloudflare opened a waitlist for managed Cloudflare OS agent workspaces with GitHub and Google Workspace support.
48
Google drops Gems for Skills, joining OpenAI and Anthropic in the shift to agent-ready prompt formats
Google is replacing Gemini Gems with Anthropic-style Skills prompts and sunsetting Gems through 2027.
48
AI's Third Wave: Coworkers Break the Security Model That Worked for Agents
Token Security says persistent AI coworkers will hold standing privileges that break human-centric OAuth and audit models.
33
Webinar tomorrow: Inside real-world Google Workspace breaches
BleepingComputer and Material Security will host a webinar on real Google Workspace breaches via OAuth abuse.
18
Webinar: Which Google Workspace security controls actually matter?
BleepingComputer and Material Security will host a September 23 webinar analyzing real Google Workspace breaches to prioritize security controls.
15
Your AI agents can now control your Google Home devices
Google launches early-access MCP server letting MCP-capable AI agents like Claude and ChatGPT control Google Home devices.
40
Webinar: What happens in the first hours of a Google Workspace breach
BleepingComputer and Material Security will host a September 23 webinar analyzing first-hours response decisions in real Google Workspace breaches.
10
Passkey-themed phishing attacks lead to Microsoft 365 data theft
Microsoft links ShinyHunters- and Helix-affiliated actors to passkey-themed vishing and device-code phishing that compromises Microsoft 365 accounts and steals cloud data.
78
Introducing automatic remediation policies with Cloudflare CASB
Cloudflare CASB now offers automatic remediation policies that revoke risky SaaS file shares or trigger webhooks within five minutes of detection.
30
Synology ActiveProtect Manager 2.0 improves AI-driven security
Synology released ActiveProtect Manager 2.0, expanding backup coverage to EC2, Azure, Proxmox and Google Workspace, with AI anomaly detection and malware scanning coming in 2.1.
25
Try Google Pics: Easy image creation and editing in Google Workspace
Google rolls out Pics, a Nano Banana-based image creation and editing tool, to Workspace subscribers with integrations in Docs, Slides, and Drive.
28
iAuthFlow v2: The $10,000 Phishing Toolkit That Survives Your Password Reset
Abnormal Security details iAuthFlow v2, a $10,000 phishing kit that enrolls attacker-controlled passkeys on Google accounts, persisting through password resets.
63
Phishing 3.0: The Fight Moves to Agent Versus Agent
Agentic AI transforms phishing economics, enabling personalized multi-channel attacks with deepfakes like the $25M Arup deepfake heist.
40
Appears with
- Googlevendor · 24
- Microsoftvendor · 16
- Microsoft 365product · 12
- Googleorganization · 9
- Slackproduct · 6
- Anthropicvendor · 4
- Microsoftorganization · 4
- Nikkeivictim · 4
- Anthropicorganization · 4
- Geminiai model · 4
- OpenAIvendor · 4
- CISAorganization · 3
- Geminiproduct · 3
- ScubaGearproduct · 3
- ChatGPTproduct · 3
- Nikkeiorganization · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.