All news with #google tag

🚨 Google said it disrupted IPIDEA, a large residential proxy service, seizing dozens of domains and rendering the IPIDEA site inaccessible after legal action. The company said the network advertised more than 6.1 million daily updated IPs and 69,000 daily new addresses and had been leveraged by over 550 distinct threat groups for cybercrime, espionage, and APT activity. Google reported about 7,400 Tier Two servers, flagged thousands of trojanized Windows binaries and roughly 600 Android apps tied to the service, and updated Google Play Protect to warn or remove apps containing IPIDEA code.

🏠 This week Google Threat Intelligence Group led coordinated legal, technical, and platform actions to disrupt the IPIDEA residential proxy network, a large global provider of exit-node infrastructure. Actions included domain takedowns, sharing SDK and infrastructure intelligence with platform providers and law enforcement, and enforcing Google Play Protect to remove and block offending apps. These steps materially degraded IPIDEA’s operations and reduced the pool of available exit-node devices by millions while enabling broader partner remediation.

🤖 Chrome Enterprise presents the browser as an intelligent, agentic workspace that automates multi‑step tasks and integrates Google’s Gemini models directly into the user experience. It emphasizes enterprise controls—such as enhanced DLP (real‑time copy/paste restrictions, data masking, dynamic watermarking) and per‑group AI feature management—to prevent data leakage and limit access to unapproved generative tools. Chrome also adds a double‑check review system and strict site scoping for agent actions, aiming to balance productivity gains with robust security protections.

🚀 Dataflow now broadens ML infrastructure with new accelerator and provisioning options to support batch and streaming workloads. It adds support for H100 and H100 Mega GPUs and TPU V5E, V5P, and V6E, plus reservation capabilities and a flex-start provisioning model via the Dynamic Workload Scheduler. ML-aware streaming autoscaling and right fitting heterogeneous worker pools aim to improve throughput and reduce cost for inference and streaming ML jobs.

✨ BigQuery now integrates Gemini and Vertex AI models directly into SQL, enabling in-place generative AI and embedding workflows. New functions—AI.GENERATE(), AI.GENERATE_TABLE(), AI.EMBED(), and AI.SIMILARITY()—support text and multimodal inputs and return structured outputs via an output_schema for immediate querying. End User Credentials simplify authentication, and Gemini 3.0 Pro/Flash support is available for advanced generative tasks.

📞 ShinyHunters says it is behind a wave of voice-phishing campaigns that compromise single sign-on accounts at Okta, Microsoft Entra, and Google, enabling access to downstream SaaS platforms. Attackers call employees posing as IT, steer victims through dynamic phishing pages and capture multi-factor authentication in real time, then enumerate connected applications to harvest data. The group claims Salesforce as a primary target and has issued extortion demands using stolen information.

🚀 Cloud Composer now supports Apache Airflow 3.1 in preview, marking the first time a hyperscaler offers this release. Built on Airflow 3's decoupled architecture and DAG versioning, the Composer update brings Human-in-the-Loop approvals, Deadline Alerts, and native internationalization across 17 languages. Additional developer-focused enhancements include a React plugin system and an inference execution streaming API. The preview is available now.

🔍 Datadog LLM Observability now automatically instruments Google’s Agent Development Kit (ADK), giving teams instant visibility into multi-step agent workflows without code changes. The integration traces planner decisions, tool calls, token usage, latency, and branching on a single timeline to simplify debugging and cost analysis. Built-in and custom evaluators detect hallucinations, PII leaks, and prompt injections, while replay and experiment features let teams iterate on prompts, models, and parameters before deployment.

🛠️ Google SREs describe using Gemini 3 and Gemini CLI to accelerate incident response across the full lifecycle: paging, mitigation, root cause analysis, and postmortems. The CLI integrates with SRE tools (alerting, logs, timeseries, and source control) and selects deterministic, typed actions while enforcing policy to keep humans in the loop. In practice it lowers Mean Time to Mitigation by automating playbook selection, executing safe mutations with approval, and producing fixes and postmortems that are auditable and repeatable.

🛠 This episode of the Agent Factory podcast showcases Google’s new developer tools: Antigravity, an agent-first multi-window IDE, and Nano Banana Pro, the Gemini 3 Pro image model. Hosts Remik and Vlad demo building an agentic slide generator using the Agent Development Kit, Antigravity’s Agent Manager, and an MCP server, highlighting planning, testing, and high-fidelity image creation.

🔒 Security teams at fast-growing companies must secure collaboration platforms without slowing the business. This piece highlights common native gaps in Google Workspace—from BEC and targeted phishing to legacy protocol exposure and weak OAuth controls—and lists immediate hardening steps for Gmail, access, and data protection. It also outlines how Material augments Workspace with advanced email defense, context-aware account monitoring, and automated data protection.

🚀 This guide demonstrates how to create and deploy a public web app using Gemini 3 Flash Preview via Google AI Studio and Google Cloud Run. In Build mode you describe the application in natural language and let the model "vibe code" a complete app, which appears instantly in the Preview panel for testing. When satisfied, a single Deploy App action pushes the app to Cloud Run, exports your API key as an environment variable, and provides a shareable URL. Note that deployment requires a Google Cloud project with billing enabled.

📚 This free course from Google Cloud and DeepLearning.ai teaches practical use of Gemini CLI, guiding users through installation, context management, extensibility, and specialized workflows. It is designed for developers and non-developers who want to integrate the CLI into daily tasks such as data analysis, content generation, and personalized learning. The curriculum runs in under two hours and provides hands-on lessons covering GEMINI.md, memory features, MCP servers, and extensions.

📰 Google says Gemini will not include ads for now, a stance confirmed by DeepMind CEO Demis Hassabis at the Davos Economic Forum. Google AI leadership reiterated that it currently does not plan to monetize Gemini with advertising, although the company did not rule out future changes. Meanwhile, OpenAI has begun testing ads in ChatGPT in the U.S. for Free and Go users, with paid tiers expected to remain ad-free.

⚠️ Researchers at Miggo Security demonstrated that Google Gemini can be manipulated via malicious Calendar invites to exfiltrate private event data. By embedding natural-language prompt-injection payloads in an event description, attackers can cause Gemini to summarize private meetings and write that summary into a new event visible to participants. Miggo reported the issue and Google has implemented mitigations.

🚀 Firestore Enterprise introduces an advanced query engine with more than a hundred new pipeline operations available in preview. The update lets developers chain stages for aggregations, grouping, filtering and array unnesting, reducing reliance on mandatory indexes for many queries. It also adds precise index controls, query explain and query insights for deeper observability, and a clearer pricing model aimed at lowering read and storage costs.

⚠️ Researchers disclosed an indirect prompt-injection flaw that allowed Google Gemini to bypass calendar privacy controls and exfiltrate meeting data. A crafted Google Calendar invite could hide a natural-language payload that Gemini later parsed, summarized, and wrote into new events whose descriptions leaked private meeting content. Miggo Security reported the issue and said it has been responsibly disclosed and addressed, highlighting how AI-native features increase the attack surface when assistants can read, summarize, and write into productivity services.

🤖 Google is testing new Skills for its Gemini AI in Chrome that enable the assistant to perform tasks automatically inside the browser. A hidden page, chrome://skills, has been identified and appears to let users add Skills with a name and instructions while the feature is being internally tested. Currently, Gemini in Chrome acts as a helper on desktop in the US, summarizing pages, explaining content, and combining information from multiple tabs. Google plans to evolve Gemini into an agent that will work more closely with apps like Calendar, YouTube, and Maps, though rollout timing is still unclear.

🔒 Google Chrome now allows users to delete the local AI models that power the Enhanced Protection feature, which received AI upgrades last year. The device-hosted model performs real-time scans of sites, downloads, and extensions to flag potentially dangerous content. Researcher Leopeva64 spotted a new control in Chrome Canary; to remove the model, go to Settings > System and turn off "On-device GenAI." Google will roll the option to stable channels soon.

⚠️ XM Cyber disclosed privilege-escalation flaws in Google’s Vertex AI that let low‑privileged users manipulate Google-managed Service Agents to gain elevated project-wide permissions. Google told XM Cyber this behavior is "working as intended." Security experts warn that managed service identities and insecure defaults create invisible, structural risks. CISOs are urged to audit service identities, reduce authentication scope, and monitor agent activity like privileged users.