ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “Pixel 10”

187 items

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllVulnerability 66Exploit / PoC 26Ransomware 15Malware 15Phishing & fraud 10Policy & legal 10Threat actor 10Industry 9Data breach 9Research 8AI tools & infra 3Tools 3Model release 2AI industry 1
SeverityAllcritical 60high 44medium 39low 35info 9

Forgery of C2PA on a Pixel 10

Researcher forged a Google Pixel 10 C2PA content credential with genuine signatures, showing root-level attackers can fake photo provenance.

A Hacker Factor blog post demonstrates an AI-generated 'unicorn glitter milk' news photo carrying a valid, cryptographically signed C2PA manifest traceable to Google's Pixel camera certificate chain, passing validation in Adobe Inspect and the CAI Verify tool with a verified timestamp. The author, working with UMBC's PASAWG working group, reported to Google and C2PA in November 2025 that root access on a Pixel device could sign arbitrary images as camera captures; after 90 days without resolution, details were published. The finding undermines C2PA Assurance Level 2 claims made for Pixel 10 Content Credentials.

Lobsters · security · 16h agoResearch

Top 10 Best Browser Isolation Solutions in 2026

A 2026 market overview ranks ten remote browser isolation tools, with Menlo Security as the pure-play reference as SSE vendors bundle isolation.

The article compares ten remote browser isolation (RBI) options, including Menlo Security, Zscaler, Cloudflare, Palo Alto Networks, Broadcom (Symantec), Forcepoint, Skyhigh Security, Ericom (Cradlepoint), Authentic8, and Garrison. It argues that RBI has become a bundled policy action inside SSE platforms from Zscaler, Cloudflare, Palo Alto, Broadcom, Forcepoint, and Skyhigh, compressing standalone pricing and driving consolidation such as Ericom's isolation moving under Cradlepoint (Ericsson). Enterprise browsers like Island and Chrome Enterprise Premium are reshaping the RBI-versus-browser decision for managed users, while selective policy-driven isolation of risky categories is described as the prevailing 2026 architecture. The piece is a buyer's guide with vendor positioning, not an incident or vulnerability report.

Cyber Security News · 5d agoIndustry

Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation

Google's September Pixel update patches CVE-2026-58704, a high-severity cellular modem privilege escalation flaw showing signs of limited targeted exploitation.

Google disclosed CVE-2026-58704 (CVSS 8.0), a privilege escalation flaw in the Pixel Cellular Modem caused by a logic error permitting proximal/adjacent privilege escalation with no user interaction or extra privileges needed. Google acknowledged indications the flaw may be under limited, targeted exploitation but did not identify the threat actor. The September 2026 Pixel update fixes 109 additional flaws, including 46 critical-severity issues in components such as BigOcean, Bootloader, IMS, and Trusted Execution Environment, plus two high-severity kernel privilege escalation bugs (CVE-2026-56914, CVE-2026-58773). Security patch level 2026-09-05 or later resolves all identified flaws.

The Hacker Newsupdated · 12h agofirst · 18h agoExploit / PoC in the wild 8 sourcesCVE-2026-58704CVE-2026-56914CVE-2026-58773+1 CVEs

Introducing WeatherNext 3, our most advanced and accurate global weather AI model

Google DeepMind launches WeatherNext 3, an AI weather model delivering hourly 5-km forecasts from live satellite data, now integrated across Google products.

WeatherNext 3 ingests live geostationary satellite mosaics and station observations through a Functional Generative Network (FGN) mesh transformer, producing hourly forecasts at 5-km surface resolution versus WeatherNext 2's 25-km, 6-hour grid. Independent live evaluations by Brightband rate it the most accurate global weather model to date. It adds renewable-energy variables such as 100-meter turbine-height wind speeds and solar radiation, and is integrated across Search, Gemini, Maps, Google Maps Platform, and Cloud.

Google DeepMind · 13d agoModel release