GitHub project claims Gemini sends Drive files and email to annotators
The feed is only a Hacker News title; it includes no method, scope or Google response.
Stories per day · 30 days
2 RSS
Relatedbrowser-tools1data-privacy1gemini1google1human-review1onedrive1path-traversal1presentations1remote-code-execution1ultralytics1
7 stories, newest first · one card per story
Stories tagged #google-drive
Ultralytics Google Drive path traversal zero-day can run attacker code
A user must open a malicious page or file; ZDI rates ZDI-26-818 at CVSS 8.8.
Silent Ransom Group Allegedly Extorted $207 Million Without Encrypting Files
Silent Ransom Group allegedly took about $207 million from 27 law firms using phone social engineering, not encryption.
7
CVE-2026-81914: Apache Airflow Google provider: Google Drive query injection via unescaped file and folder names
Apache Airflow Google provider before 22.6.0 allows Google Drive query injection via unescaped names (CVE-2026-81914).
China’s ‘SilkParasite’ espionage operation targeting Central Asia with AI
Bitdefender attributes the SilkParasite espionage campaign to China-linked actors using five new malware strains and AI-assisted development to target Central Asian governments.
4
TrickBot Campaign Uses Fake Payroll Emails to Conduct Phishing Attacks
TrickBot phishing campaign used SendGrid, fake Google Docs, and Drive-hosted downloaders disguised as Word files to deliver a credential-stealing payload.
UBoatRAT Navigates East Asia
Unit 42 discovers UBoatRAT, a new custom RAT targeting South Korean and video-game industry personnel, delivered via Google Drive with GitHub-based C2 and BITS persistence.