Search: “Google Maps”

Building AI to accelerate science and improve lives

Google highlights AI-for-science advances: AlphaGenome Atlas mapping 9 billion genetic variants, WeatherNext 3 weather model, and global health AI tools.

Google detailed AI advances across science and health, including AlphaGenome Atlas, which mapped all 9 billion possible single-letter genetic changes in the human genome and was made openly available. WeatherNext 3 delivers 50% more accurate precipitation forecasts a day or more ahead and is already in products. AlphaFold is used by 4 million researchers in 190 countries, TB chest X-ray screening has processed 25,000+ scans across six nations, and the diabetic retinopathy model has supported 1.15 million screenings. Google also released its AI & Economy ATLAS global usage insights.

Google · AI·Sep 15, 16:00 UTC · 22h agoAI industry

Google’s AI weather model now uses more raw satellite data

Google launched WeatherNext 3, an AI weather model using raw satellite data that beats ECMWF and now powers Search, Gemini, and Maps.

Google released WeatherNext 3, an AI weather forecasting model that incorporates physical surface information (land/ocean type and elevation) to improve surface temperature and dewpoint calculations, improving point location temperature accuracy by up to 30 percent. Its white paper reports roughly 5 percent better upper-atmosphere accuracy than WeatherNext 2, equating to about six additional hours of forecast lead time, outperforming the ECMWF AI model on these metrics. The model now supplies forecast information across Google Search, Gemini, and Maps, though the paper notes unexplained short-lead degraded results and grid-shaped artifacts in some predictions.

Ars Technica · AI·Sep 8, 18:00 UTC · 7d agoModel release

Google researchers uncover criminal zero-day exploit likely built with AI

Google links a likely LLM-built criminal zero-day for an open-source admin tool to planned mass exploitation and maps AI-assisted threats.

Google Threat Intelligence Group linked a zero-day exploit for a popular open-source web-based administration tool, enabling 2FA bypass with valid credentials via a semantic logic error, to a criminal group, citing educational docstrings, a hallucinated CVSS score, and textbook Python as signs of LLM authorship; the vendor was notified before a planned mass exploitation campaign. The report also details Russia-nexus malware families CANFAIL and LONGSTREAM using AI-generated decoy code, the PROMPTSPY Android backdoor driving the UI through the Gemini API, APT27 using Gemini to build relay tooling, and the TeamPCP (UNC6780) supply chain compromise of LiteLLM and Trivy repositories that planted the SANDCLOCK credential stealer.

Help Net Security·Aug 24, 04:21 UTC · 23d agoThreat actor

3 new ways to plan and book travel in Search

Google Search's AI Mode adds travel features: hotel booking, airfare tracking, and airline miles and rewards visibility.

Google introduced three new travel capabilities in Search's AI Mode, including hotel booking, airfare tracking, and viewing airline miles and rewards. The features extend AI Mode from informational queries into transactional travel planning. The announcement positions Google Search to compete more directly with travel-focused booking services.

Google · AI·Aug 27, 16:00 UTC · 19d agoAI industry

GeoJSON Map Viewer

Simon Willison built a GeoJSON map viewer with PNG export using GPT-5.6-Sol, Claude Code for web, and Fable 5.1.

Simon Willison describes building a GeoJSON map viewer that displays boundary files and exports maps as PNGs. GPT-5.6-Sol proactively offered to create the tool, and iterations used Claude Code for web and Fable 5.1. He also notes ChatGPT Work will assemble boundary polygons from government data sources when asked.

Simon Willison·Sep 1, 18:05 UTC · 14d agoAI tools & infra

AI for Societal Impact

Google publishes a collection page showcasing partnerships applying AI to health, disaster prediction, learning, and economic opportunity.

Google's 'AI for Societal Impact' page curates examples of experts and local leaders applying AI to disease detection and prevention, natural disaster prediction, education, and economic opportunity. It is a marketing-oriented collection page with no new technical details.

Google · AI·Sep 15, 16:00 UTC · 22h agoAI industry

APT36 Suspected in PATCHCORD Espionage Campaign Using Google Sheets C2

Acronis links the PATCHCORD espionage campaign targeting Afghan telecom and South Asian critical infrastructure to APT36 with moderate confidence.

Acronis Threat Research Unit documented PATCHCORD, a previously undocumented C/C++ backdoor delivered via fake VPN installers impersonating Afghan Telecom (AFTEL), which hijacks Edge, Chrome and Firefox shortcuts for persistence and executes in-memory shellcode. A related Go implant, SHEETCORD, abuses the Google Sheets API for per-victim C2 and was distributed via a domain impersonating India's National Informatics Centre, while a third tool, HACKERAI C2 Agent, uses GitHub Gists and shows signs of LLM-assisted coding. An exposed staging server revealed SuperShell, RAT frameworks, credential-harvesting tools and OpenSSH exploit code, and the researchers attribute the activity to APT36/Transparent Tribe at moderate confidence.

Security Affairs·Aug 16, 07:24 UTC · Aug 16, 2026Threat actor in the wild

Hackers Abuse Google CAPTCHA, WebDAV and BNB Smart Chain to Deploy Credential-Stealing Malware

Cisco Talos details ClickFix campaigns abusing fake Google CAPTCHA prompts, WebDAV and BNB Smart Chain to deploy the Amatera infostealer.

Cisco Talos identified a multi-stage campaign, first observed in April 2026 when a Ukrainian government organization executed a disguised DLL named verification.google from a WebDAV path. The chain combines ClearFake JavaScript injected via malicious Cloudflare Workers, EtherHiding payloads stored in BNB Smart Chain contracts, ClickFix social engineering, and WebDAV-hosted DLL loaders to deliver the Amatera (ACR Stealer) infostealer. The Amatera configuration contained over 400 collection entries targeting browsers, messengers, crypto wallets, password managers, FTP and VPN tools, hunting for .kdbx, .p12, .pfx and .pem files. The pf.ch branch deploys ZigCryptoStealer, an EDR-terminating vulnerable driver and Go-based reverse TCP proxies, while the verification.google branch installs NetSupport Manager, supporting moderate-confidence attribution of the UAT-10820 activity to a Russian actor.

GBHackers·Sep 9, 13:27 UTC · 7d agoMalware in the wild

New insights from Google’s AI & Economy ATLAS

Google launches an interactive AI & Economy ATLAS experience; new research shows nearly half of surveyed scientists use AI daily.

Google introduced new interactive, open-access data visualizations for its AI & Economy ATLAS project tracking global AI adoption patterns. Research from Google, Google DeepMind, and MIT FutureTech analyzed 2,600 specialized AI models and surveyed over 600 U.S. and U.K. scientists, finding nearly half use AI daily and report saving almost seven hours per week. The study also found validation bottlenecks and a growing backlog of untested hypotheses limiting research productivity gains.

Google · AI·Sep 15, 13:00 UTC · 1d agoAI industry

Florida says motor vehicle data breach tied to credentials stolen from officer’s personal device

ShinyHunters breached Florida's DMV using credentials stolen from a police officer's personal device; the state confirmed the breach and is investigating.

Florida's Department of Highway Safety and Motor Vehicles (FLHSMV) confirmed a data breach after ShinyHunters obtained DMV data using credentials a criminal actor took from a Plant City police officer's personal electronic device. The department learned of the breach on September 4, is investigating with the Florida Digital Service, and ShinyHunters shared a DMV record of Jeffrey Epstein as proof of access. Experts initially speculated a link to the IDScan breach of 153 million driver's licenses. Anthropic reported that suspected ShinyHunters affiliates use AI to scan credentials, map systems, and exfiltrate data, in one case moving from a stolen developer token to cloud admin access in about three hours.

The Record·Sep 11, 20:00 UTC · 4d agoData breach in the wild 2 sources

Webinar: Learn How to Answer “Are We Exposed?” Faster After a New CVE

Tines will host a September 2026 webinar showing security teams how to combine SBOM, endpoint, cloud, and vulnerability data into one exposure assessment workflow.

The Hacker News published a contributed webinar announcement from Tines titled "Outpacing AI-Era Attacks Starts With Faster Time to Answer." Tines Co-founder Thomas Kinsella and Senior Security Operations Engineer Andrew Katz will demonstrate connecting SBOM data, endpoint application data, cloud inventory, and vulnerability feeds into a single interactive exposure view. The session also covers pairing AI-assisted analysis with deterministic, reviewed automation to reduce time from CVE disclosure to exposure determination.

The Hacker News·Sep 9, 11:57 UTC · 7d agoIndustry

GPT-6 built this earth exploration site in 5 prompts

Hacker News post showcases an interactive earth exploration website that GPT-6 generated from only five prompts.

The item is a Hacker News submission (23 points, 32 comments) linking to earth.ethanplus.ai, an earth exploration website the author says was built by GPT-6 in five prompts. It functions as a community demo of the model's web development and generative capabilities rather than a research or security disclosure.

Hacker News · security·Sep 11, 21:39 UTC · 4d agoAI industryHN 23↑ · 32 comments

Opaque recurrence, and other AI terms that you should probably know

TechCrunch updates its plain-English glossary defining common AI terms from AGI and agents to chain-of-thought reasoning.

TechCrunch maintains a regularly updated glossary of AI terminology, defining terms such as AGI, AI agents, API endpoints, chain of thought, coding agents, compute, deep learning, and diffusion. It highlights 'opaque recurrence', the reasoning technique in OpenAI's new Astra model that has drawn attention from AI safety researchers. The piece is an educational living document rather than new research or a product announcement.

TechCrunch · AI·Sep 7, 19:24 UTC · 8d agoAI industry

5 new ways to level up your learning with Search

Google promotes five Search study tools for students preparing for classes and standardized tests.

Google published a back-to-school post highlighting five ways to use Search tools when studying for classes and standardized tests. The post is promotional product guidance rather than a launch, research result, or security announcement.

Google · AI·Aug 19, 19:00 UTC · 27d agoAI industry

Attack Paths Into VMs in the Cloud

Unit 42 maps attack paths into AWS, Azure, and GCP VMs through intended features like startup scripts and SSH key pushes.

Palo Alto Unit 42 reviewed attack vectors against virtual machine services on AWS, Azure, and GCP, finding that 11% of internet-exposed cloud hosts carry Critical or High severity vulnerabilities. The attack paths rely on legitimate features such as EC2 User Data, VM custom data, EC2 Instance Connect, SSM Run Command, and serial consoles rather than vulnerabilities, and exploiting them requires attackers to first obtain control plane permissions. A compromised VM exposes not only its data but the workload identity and cloud permissions assigned to it, making identity compromise potentially more damaging than data theft. The firm places mitigation responsibility on cloud users and administrators.

Palo Alto Unit 42·Aug 17, 12:36 UTC · Aug 17, 2026Research1

Google’s new search redirects make links harder to check before you click

Google routes some search result links through encoded google.com/goto?url= redirects, breaking hover-to-verify link checks and raising scraping costs.

Google has started routing some search result links through opaque google.com/goto?url=... redirects using a custom Google-specific encoding, with the destination visible only via the redirect response's Location header. Google confirmed the rollout as an anti-abuse measure, most likely to make bulk extraction of destination URLs from search results more difficult and costly. Malwarebytes warns the change undermines the standard hover-before-clicking safety advice, while legitimate rank-tracking, SEO auditing, archival, and accessibility tools now face the same rate limits and costs as abusive scrapers.

Malwarebytes Labs·Sep 14, 14:17 UTC · 2d agoIndustry

AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model

The Hacker News·Aug 6, 09:25 UTC · Aug 6, 2026VulnerabilityCVE-2026-18830CVE-2026-18236CVE-2026-64650+1 CVEs1

Schools are catching on to Big Tech’s playbook

A new book warns AI firms are repeating Big Tech's education playbook, as New York City and Los Angeles restrict classroom AI use.

NYT education reporter Natasha Singer's book 'Coding Kids' documents how Apple, Microsoft and Google embedded proprietary curricula and Chromebooks in US schools over 15 years, building product loyalty and market position. Google's Chromebook and Classroom dominance positioned it to promote generative AI in classrooms. New York City banned AI in elementary and middle schools and Los Angeles imposed broader restrictions including high schoolers, as parents and teachers push back against screens and AI in classrooms.

The Verge · AI·Sep 10, 19:44 UTC · 5d agoAI industry

New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing

DDRop uses a sub-$200 DDR5 interposer to drop memory writes, breaking Intel TDX and AMD SEV-SNP confidentiality guarantees.

Researchers at KU Leuven, ETH Zurich, Durham University, and Google will present DDRop at ACM CCS 2026, a first active interposer attack on DDR5 that silently drops memory writes so processors keep reading stale encrypted data, exploiting the missing freshness guarantee in Intel TDX, Intel Scalable SGX, and AMD SEV-SNP. On Intel TDX's default logical integrity mode it enabled reading victim VM memory, toggling debug mode, and forging remote attestation; AMD SEV-SNP was limited to copying pages between VMs. TDX's stronger cryptographic integrity blocks cross-VM attacks but likely not attestation forgery. The team will release board designs, firmware, and attack code on GitHub; no evidence of real-world use exists and no simple patch is available.

The Hacker News·updated Sep 15, 09:57 UTC · 1d ago·first Sep 14, 16:58 UTC · 1d agoResearch 2 sources

Google Search Makes It Harder to See Where a Link Really Goes Before You Click

Google now routes some Search results through opaque google.com/goto redirects, weakening hover-to-verify anti-phishing checks.

Google has begun serving some organic search results as opaque google.com/goto?url= redirects whose destinations can only be resolved server-side by Google, likely to raise scraping costs for rank trackers and archival services. The change removes the pre-click hover preview of the true destination URL, undermining a long-standing anti-phishing habit for spotting lookalike, typosquatted, or search-optimized phishing domains. Security teams are advised to rely on layered defenses such as domain reputation, DNS and web filtering, browser isolation, and user training rather than hover text.

GBHackers·Sep 15, 13:42 UTC · 1d agoIndustry

Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance

Anthropic's new Compliance API endpoints expose Claude Code local session transcripts, highlighting governance gaps for endpoint AI agents.

Anthropic added local session transcript endpoints to its Compliance API on August 11, 2026, giving security teams visibility into prompts, bash commands, file operations, and MCP commands run by Claude Code harnesses on endpoints. The article argues local harnesses break the classic shared-responsibility model, citing Token Security data that 68.6% of discovered AI agents run on endpoints, and a Cloud Security Alliance survey of 418 IT and security professionals in which 82% found an unknown agent within the past year. It outlines three governance layers: Anthropic managed settings as a policy baseline, the Compliance API for cloud-visible transcripts, and endpoint telemetry to connect agent activity to identity, credentials, and permissions.

The Hacker News·Aug 31, 11:31 UTC · 16d agoAI safety & security1

Mercator ↔ Equal Earth

Simon Willison used GPT-6 Astra (medium) in ChatGPT Work to build an animated D3 transition between Mercator and Equal Earth map projections.

Willison built an animated transition between the Mercator and Equal Earth map projections using D3. The tool was generated by GPT-6 Astra (medium) in ChatGPT Work. Equal Earth is a projection recently voted on at the UN. The post is a vibe-coding demonstration rather than a security or major model event.

Simon Willison·Sep 7, 16:24 UTC · 8d agoAI tools & infra1

Why the current tech backlash feels different

The Verge's Decoder mailbag discusses the current tech backlash, arguing AI hype overstates verifiability outside software engineering.

Nilay Patel's Decoder mailbag episode addresses listener feedback on the widely discussed 'software brain' essay. He argues AI hype is concentrated on software because code is verifiable through compilation, while domains like drug discovery, math and science lack equivalent verifiability. The episode also touches on AI backlash, surveillance, data centers and upcoming midterm coverage.

The Verge · AI·Sep 10, 14:00 UTC · 6d agoAI industry1

Google's new AI model predicts the future from sales data, weather, and discount schedules

Google Research released TimesFM-3, a 330M-parameter multivariate time series forecasting model that tops Gift-Eval, FEV-Bench, and Time benchmarks and is on Hugging Face.

Google Research released TimesFM-3, a 330-million-parameter Transformer-based time series forecasting model trained on more than one trillion real and synthetic data points. It works zero-shot and adds multivariate support, ingesting related series, historical-only covariates, and known future events such as discount schedules and weather forecasts, while filling all future time steps in a single one-shot pass. Google reports first place among pretrained forecasting models on Gift-Eval, FEV-Bench, and Time, ahead of Amazon's Chronos-2, the Toto-2.0 family, and its own TimesFM-2.5. Weights are available on GitHub and Hugging Face, with BigQuery integration planned in the coming weeks.

The Decoder·Sep 12, 09:26 UTC · 4d agoModel release2

One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025

Reco tracks the City Forum campaign: one Contabo VPS has scraped Salesforce and ServiceNow guest portals across finance, telecom and public sector since March 2025.

Reco researchers identified infrastructure at 158.220.87.79, a Contabo VPS using Go's default net/http user agent, that has harvested records from Salesforce Experience Cloud and ServiceNow customer portals across telecom, financial services, enterprise software and public sector targets for over a year. The tool abuses over-privileged persistent guest users, enumerating Salesforce Aura sites (560,000+ events at one target), probing Lightning Web Runtime via the UI-API across API versions v56.0-v66.0, and hitting the poorly documented ServiceNow Service Portal search endpoint. No named victims or actor attribution yet, and activity is ongoing with rising volume. Defenders are advised to hunt the Go-http-client user agent and specific IP in Salesforce Event Monitoring logs and syslog_transaction on ServiceNow, then tighten guest sharing rules and Knowledge Base read criteria.

The Hacker News·Aug 18, 11:30 UTC · 29d agoThreat actor in the wild1

This Tool Unmasks the Shadowy World of Ads that Track Your Location

404 Media covers DecryptAds, a new tool offering a massive queryable dataset for investigating location-tracking advertising.

404 Media reports on DecryptAds, a new tool paired with a large queryable dataset designed to make investigating the advertising industry's location-tracking practices much easier. The article is paywalled, so further technical details about the dataset are limited.

404 Media·Aug 12, 12:49 UTC · Aug 12, 2026Tools

Android Car Malware Spreads Through Built

Kaspersky found MoYu Group malware infecting DoFun Android car head units via firmware updaters, enabling ad fraud and proxy botnet operations.

Kaspersky discovered in June 2026 the first documented malware specifically infecting Android-based car head units, spread through the built-in updater (TWCore) of DoFun head unit firmware via a dropper dubbed JarService. The multi-stage implant supports nine commands enabling unwanted ads, ad fraud, and additional module downloads, and installs the zhima reverse proxy module. The campaign is attributed with high confidence to the MoYu Group behind the BADBOX ad fraud and residential proxy scheme; the distribution issue was fixed after responsible disclosure.

The Hacker News·Aug 25, 06:01 UTC · 22d agoMalware in the wild

Google’s New Search Redirects Make It Harder to Check Where Links Lead Before Clicking

Malwarebytes reports Google's new encoded google.com/goto?url= redirects break hover-preview link checking, weakening a common phishing defense.

Google now routes some search results through opaque google.com/goto?url= redirects using custom encoding, so browser link previews no longer reveal the true destination, only the claimed label above the result. Malwarebytes found the final destination is visible only in the redirect response's Location header, complicating hover-based safety checks as well as scraping, archiving, and audit tools. The change arrives amid malvertising, search-result poisoning, and fake installer campaigns like the recent Node.js infostealer lure. Google says it deploys measures against evolving abuse but did not explain the change.

Cyber Security News·Sep 15, 12:21 UTC · 1d agoResearch

IAM Compliance Requirements and Best Practices

A guide maps IAM compliance requirements across SOX, PCI DSS, HIPAA, ISO 27001 and NIST 800-53, urging verified enforcement over documented policies.

The guide argues IAM compliance requires demonstrating that access controls are enforced at runtime, not merely documented, highlighting gaps between policy intent and application-layer execution. It maps recurring requirements across SOX ITGCs, PCI DSS v4.0, HIPAA, ISO/IEC 27001:2022, NIST SP 800-53 and GDPR, covering least privilege, separation of duties, access certification and audit trails. It recommends continuous, evidence-backed verification and application-layer telemetry instead of relying on identity provider logs or quarterly access reviews.

The Hacker News·Aug 28, 09:06 UTC · 19d agoIndustry

Generating running routes with GPT-6 Astra and ChatGPT Work

Simon Willison used ChatGPT Work with GPT-6 Astra to generate 5K/10K running loops from OpenStreetMap data, noting the agent's executed code was not visible.

Simon Willison prompted ChatGPT Work running GPT-6 Astra (Max) to design looping 5K and 10K running routes from his address using OpenStreetMap data. The agent ran for 27 minutes and delivered an embedded visualization plus downloadable GPX and GeoJSON files, stating it used Nominatim for geocoding and Overpass to fetch local OSM roads and trails. He notes frustration that the actual executed code and exact actions were not visible in the ChatGPT UI, highlighting a transparency gap in agentic AI products.

Simon Willison·Sep 12, 23:56 UTC · 3d agoAI industry

The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions

Elastic details KREMLIN, a Brazilian banking malware whose malicious Chrome/Edge extension forges Chromium integrity checks to steal sessions.

Elastic Security Labs tracked operation REF9334 and its KREMLIN toolkit, a Brazilian banking malware campaign impersonating twelve banks across seven campaigns since May 2025. The infection chain uses multi-stage obfuscated JavaScript loaders with sandbox checks (file and process counting), scheduled-task persistence, and an Ethereum smart contract acting as a dead-drop resolver for C2 and payload URLs, abusing Archive.org for hosting. The malicious browser extension bypasses Chromium integrity mechanisms by manipulating Secure Preferences and regenerating required HMACs and App-Bound encrypted hashes. Threat Command disrupted over 1,500 infections by registering the kill-switch canary domain.

Elastic Security Labs·Sep 14, 00:00 UTC · 2d agoMalware in the wild

Product showcase: AI Paper Trail shows the privacy cost of talking to AI

Proton launched AI Paper Trail, a free tool that analyzes ChatGPT or Claude exports and reports what personal data can be inferred from AI conversations.

Proton released AI Paper Trail, a free web tool that analyzes the 200 most recent prompts from exported ChatGPT or Claude conversation histories and generates a privacy report with an AI Exposure Score, inferred personal data categories, and an estimated advertising value. In a hands-on test it identified 47 data points, returned a 58/100 exposure score, estimated $185 in advertising value, and flagged five red flags spanning location, interests, finances, and relationships. Proton states that uploaded data is deleted after analysis and is not stored on its Lumo servers.

Help Net Security·Aug 24, 00:00 UTC · 23d agoAI industry

Sure, Meta’s AI Muse works, but it sure creeps me out

Hands-on review finds Meta's Muse AI agent completes shopping and email tasks but surfaces personal Instagram API data beyond user-visible ad-topic settings.

Meta launched Muse, its first agentic AI productivity assistant, which performs tasks like shopping, email management, trip planning, media generation, and creating webpages or documents via a cloud-based virtual computer. The Verge's hands-on found it successfully deleted thousands of promotional emails and completed an Amazon purchase, but it also revealed detailed personal interests inferred from Instagram and Facebook account API data that is not visible in the apps' ad-topic settings. Meta says Muse only exchanges data needed for third-party integrations and does not share information with advertisers; the reviewer frames privacy unease as the main adoption hurdle.

The Verge · AI·updated Sep 12, 20:00 UTC · 3d ago·first Sep 10, 15:00 UTC · 5d agoAI industry 10 sources

Get ready for the game with new football features in Search

Google Search adds a Live Game Feed, deeper football stats, and Yahoo Fantasy/Sleeper integration with AI Mode for personalized fantasy insights.

Google rolled out football features in Search, including a Live Game Feed with play-by-play updates and AI-powered insights, available on mobile in the U.S. in English. New carousels show league-wide scores and expanded player stats such as sacks, fumbles, and yards after catch. Users can link Yahoo Fantasy or Sleeper accounts to receive start/sit and waiver-wire recommendations through AI Mode. Collegiate team support and broader global availability are planned later this month.

Google · AI·Sep 9, 16:00 UTC · 6d agoAI industry

AI-fueled attacks pose ‘active threat’ to water, other sectors, U.S. agencies warn

NSA, CISA, FBI, DOE and EPA warn hackers are using AI-generated scripts to actively attack Siemens S7 PLCs across critical-infrastructure sectors.

A joint cybersecurity advisory from the NSA, CISA, FBI, Department of Energy and EPA warns of an active threat campaign targeting water, food, energy, chemical, manufacturing and commercial facilities via Siemens S7 Series programmable logic controllers. The actors use internet scanning to find exposed or poorly protected PLCs, then deploy AI-generated exploitation scripts disguised as legitimate monitoring tools, an OT first that dramatically lowers the expertise required for ICS attacks. Siemens says no new S7 vulnerabilities are involved, only exploitation of misconfigurations, and it is coordinating with CISA's ProductCERT. The warning follows a joint FBI-EPA advisory confirming attacks at water and wastewater utilities in at least 12 states since July 27.

CyberScoop·Aug 20, 14:00 UTC · 27d agoAdvisory in the wild1

Get closer to the game with Gemini and Pixel

Google's Gemini and Pixel partner with five global football clubs to add AI-powered features to the matchday fan experience.

Google announced partnerships between its Gemini AI and Pixel smartphone lines and five global football clubs. The collaboration aims to elevate the fan matchday experience through AI and smartphone technology. The announcement is primarily a consumer marketing effort rather than a security-relevant development.

Google · AI·Aug 17, 08:00 UTC · Aug 17, 2026AI industry

FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

FBI officials said AI is accelerating adversary capabilities while its new cyber strategy emphasizes continuous patching, cyber hygiene, and AI-enabled defense.

At the Billington CyberSecurity Summit and ahead of a new FBI cyber strategy, deputy assistant director Jason Bilnoski said AI is boosting the speed and capability of both criminal and nation-state attackers, while stressing that basic controls like MFA would still prevent most attacks. Colleen Ferranti urged a shift from quarterly Patch Tuesday cycles to continuous, risk-based patching as AI accelerates vulnerability discovery. The strategy pledges AI-enabled triage, malware analysis, attribution support, agentic AI adoption, expanded Computer Network Operations, ICS Coordinators in every field office, and a pledge on victim relief and privacy.

CyberScoop·Sep 9, 13:00 UTC · 7d agoPolicy & legal

To See a World in a Living Context: Unified Indoor-Outdoor Urban World Generation

Researchers introduce HoloWorld, a unified text-driven framework generating coherent indoor-outdoor 3D urban worlds, improving average AQS over SOTA by 7.68%.

HoloWorld is a text-driven 3D generation framework that unifies indoor and outdoor urban world generation using a continuously updated cross-scale world context. It autoregressively generates urban exteriors with consistent spatial organization, grounded in 3D building instances and footprints, then produces building-specific interiors with geometry-constrained layouts that inherit exterior appearance. The authors claim it is the first framework to unify indoor and outdoor generation within one coherent 3D urban world, reporting a 7.68% average AQS improvement over prior SOTA and the highest average RDR score.

Hugging Face daily papers·Aug 28, 20:00 UTC · 18d agoAI research

StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data

Check Point details StopAndProtect: ~2,000 compromised WordPress sites deliver ClickFix fake-CAPTCHA malware toolkit combining ransomware, credential theft, screenshots, and WhatsApp surveillance.

Check Point researcher Jaromír Hořejší reports the campaign begins with ClickFix fake-CAPTCHA prompts that trigger a PowerShell command, then two .NET downloader stages that launch six components: SilentEncryptor, NetworkShareScanner, a VBS spreader, LockScreen, SimpleChatProxy, and SilentDataCollector. Hacked WordPress sites host malware stages, serve C2 commands, and receive exfiltrated logs; the actors installed a self-deleting WordPress plugin enabling arbitrary PHP upload anywhere under the WordPress root. From mid-May to late July 2026 the operators exfiltrated more than 700 archives including screenshots every 30 seconds, keylogger output, and WhatsApp contact data, and opsec failures exposed their Visual Basic automation tooling and lists of nearly 2,000 compromised domains.

The Hacker News·Aug 20, 05:48 UTC · 27d agoThreat actor in the wild

AI for everyone in every language

Google says its AI now spans 300+ languages reaching 7 billion people, unveiling Gemini 3.5 Transcribe, Live Translate, and TranslateGemma models.

Google announced its technologies now support more than 300 languages spoken by 7 billion people, 86% of the global population. Gemini 3.5 Live Translate powers real-time spoken translation across 70 languages and 2,000+ language pairs, while Gemini 3.5 Transcribe is its most precise speech-to-text model. Its Universal Speech Model was trained on 12 million hours of audio using cross-lingual transfer learning, and TranslateGemma is a family of lightweight open translation models covering 55 languages that run on-device. Open-data partnerships include WAXAL covering 27 Sub-Saharan African languages and Project Vaani with 30,000+ hours of speech across 109 languages.

Google · AI·Sep 15, 16:00 UTC · 22h agoAI industry