Ultimate PocketArticles
Android 17 is here
Posted by Matthew McCullough, VP of Product Management, Android Developer Today we're releasing Android 17 and making it available on most supported Pixel devices. Look for new devices running Android 17 in the coming months. Android 17 marks the start of our transition to an intelligence system, putting your apps at the center. It's shifting to an adaptive-first development standard by introducing mandatory large-screen resizability, all while delivering next-generation privacy, security, media, camera, and…
Lire l’article completWho Runs the Ransomware Group ‘The Gentlemen?’
A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affiliates 90 percent of any ransom paid by victims. This post examines clues pointing to a real life identity for the administrator of The Gentlemen ransomware group. A graphic created and shared by The Gentlemen ransomware group administrator Hastalamuerte on Breachforums…
Lire l’article completA Record-Breaking Patch Tuesday for June 2026
Microsoft today released software updates to plug nearly 200 security holes across its Windows operating systems and supported software, a record number of fixes for the company’s monthly Patch Tuesday cycle. Nearly three dozen of those bugs earned Microsoft’s most dire “critical” rating, and exploit code for at least three of the weaknesses is now publicly available. The software giant said in a blog post last month that both its engineers and the security…
Lire l’article completAI alone won’t change your business. The system running it will.
AI has arrived in the enterprise, and the shift is happening all at once. Every function, every role, every workflow is being reshaped. At the same time, a new class of organizations is emerging, one that will look fundamentally different from the companies that defined the last era of business. The winners won’t be those with the most demos, but those that turn AI into a governed, continuously improving system for running real work.…
Lire l’article completHackers Used Meta’s AI Support Bot to Seize Instagram Accounts
The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend, after instructions began circulating on Telegram showing how to trick Meta’s “AI support assistant” bot into resetting account passwords. A screenshot from a video released on Telegram claiming to show how Meta’s AI customer support bot could be tricked into resetting a target’s password. On…
Lire l’article completAnnouncing Web Serial Support in Firefox
Support for Web Serial in Firefox 151 for Desktop Firefox can now connect directly to microcontrollers, development boards, 3D printers, power meters, and other serial-connected hardware from the web. Starting in Firefox 151 for Desktop, support for the Web Serial API allows web applications to…
Lire l’article completGoogle just redesigned the search box for the first time in 25 years — here’s why it matters more than you think.
For a quarter century, the Google search box has been one of the most recognizable interfaces in computing: a thin white rectangle, a blinking cursor, a few typed words, and a list of blue links. On Tuesday, Google will formally retire that paradigm.At its annual…
Lire l’article complet[Màj] Vulnérabilité dans Microsoft Exchange Server (15 mai 2026)
Agence nationalede la écurité de y tème d'information Une ge tion de ver ion détaillée e trouve à la fin de ce document. Le 9 juin 2026, Micro oft a publié de ver ion corrective . Le 14 mai 2026, Micro oft a publié un avi de écurité concernant la vulnérabilité CVE-2026-42897 affectant Exchange Server. Elle permet à un attaquant non authentifié de provoquer une injection de code indirecte à di tance (XSS) et…
Lire l’article completBehind the Scenes Hardening Firefox with Claude Mythos Preview
@media all and (min-width: 640px) { .post p, .post ul, .post ol, .post dl, .post pre { max-width: initial; } .post table td, .post table th { vertical-align: top; } } Two weeks ago we announced that we had identified and fixed an unprecedented number…
Lire l’article completTrustworthy JavaScript for the Open Web
The open web is a critical platform for applications that handle highly sensitive data, from private communications to financial transactions and medical records. Traditionally, servers are trusted to deliver the appropriate code and resources for their web applications to browsers, who then provide a secure…
Lire l’article completAI threats in the wild: The current state of prompt injections on the web
Posted by Thomas Brunner, Yu-Han Liu, Moni PandeAt Google, our Threat Intelligence teams are dedicated to staying ahead of real-world adversarial activity, proactively monitoring emerging threats before they can impact users. Right now, Indirect Prompt Injection (IPI) is a top priority for the security community,…
Lire l’article completBringing Rust to the Pixel Baseband
Posted by Jiacheng Lu, Software Engineer, Google Pixel Team Google is continuously advancing the security of Pixel devices. We have been focusing on hardening the cellular baseband modem against exploitation. Recognizing the risks associated within the complex modem firmware, Pixel 9 shipped with mitigations against a range of memory-safety vulnerabilities. For Pixel 10, Google is advancing its proactive security measures further. Following our previous discussion on "Deploying Rust in Existing Firmware Codebases", this post…
Lire l’article completProtecting Cookies with Device Bound Session Credentials
Posted by Ben Ackerman, Chrome team, Daniel Rubery, Chrome team and Guillaume Ehinger, Google Account Security team Following our April 2024 announcement, Device Bound Session Credentials (DBSC) is now entering public availability for Windows users on Chrome 146, and expanding to macOS in an upcoming Chrome release. This project represents a significant step forward in our ongoing efforts to combat session theft, which remains a prevalent threat in the modern security landscape. Session theft…
Lire l’article completGoogle Workspace’s continuous approach to mitigating indirect prompt injections
Posted by Adam Gavish, Google GenAI Security Team Indirect prompt injection (IPI) is an evolving threat vector targeting users of complex AI applications with multiple data sources, such as Workspace with Gemini. This technique enables the attacker to influence the behavior of an LLM by injecting malicious instructions into the data or tools used by the LLM as it completes the user’s query. This may even be possible without any input directly from the…
Lire l’article completVRP 2025 Year in Review
Posted by Dirk Göhmann, Tony Mendez, and the Vulnerability Rewards Program Team 2025 marked a special year in the history of vulnerability rewards and bug bounty programs at Google: our 15th anniversary 🎉🎉🎉! Originally started in 2010, our vulnerability reward program (VRP) has seen constant additions and expansions over the past decade and a half, clearly indicating the value the programs under this umbrella contribute to the safety and security of Google and its…
Lire l’article complet
Cybersécurité
Vulnérabilité dans F5 BIG-IP Access Policy Manager (31 mars 2026)
Agence nationalede la écurité de y tème d'information Une ge tion de ver ion détaillée e trouve à la fin de ce document. Le 15 octobre 2025, F5 a publié un avi de écurité concernant entre autre la vulnérabilité CVE-2025-53521. Celle-ci affecte BIG-IP APM et permet à un attaquant non authentifié d'exécuter du code à di tance. Le 29 mar 2026, l'éditeur indique que cette vulnérabilité e t exploitée activement. Le CERT-FR recommande d'effectuer…
Lire l’article completFirefox Developer Edition and Beta: Try out Mozilla’s .rpm package!
In January, we introduced our Nightly package for RPM-based Linux distributions. Today, we are thrilled to announce it is now available for Firefox Beta! Firefox Beta is great for testing your sites in a version of Firefox that will reach regular users in the coming weeks. If you find any issues, please file them on Bugzilla. Switching to Mozilla’s RPM repository allows Firefox Beta to be installed and updated like any other application, using…
Lire l’article completSecurity for the Quantum Era: Implementing Post-Quantum Cryptography in Android
Posted by Eric Lynch, Product Manager, Android and Dom Elliott, Group Product Manager, Google Play Modern digital security is at a turning point. We are on the threshold of using quantum computers to solve "impossible" problems in drug discovery, materials science, and energy—tasks that even the most powerful classical supercomputers cannot handle. However, the same unique ability to consider different options simultaneously also allows these machines to bypass our current digital locks. This puts…
Lire l’article completNote d’alerte – Ciblage des messageries instantanées (20 mars 2026)
Agence nationalede la écurité de y tème d'information Une ge tion de ver ion détaillée e trouve à la fin de ce document. Le CERT-FR ob erve une recrude cence de campagne d’attaque ciblant le compte de me agerie in tantanée . Ce campagne ciblent particulièrement le ecteur régalien (per onnalité politique , cadre de l’admini tration) mai au i le per onnel de la ociété civile exerçant de fonction en ible (journali te…
Lire l’article completCultivating a robust and efficient quantum-safe HTTPS
Posted by Chrome Secure Web and Networking Team Today we're announcing a new program in Chrome to make HTTPS certificates secure against quantum computers. The Internet Engineering Task Force (IETF) recently created a working group, PKI, Logs, And Tree Signatures (“PLANTS”), aiming to address the performance and bandwidth challenges that the increased size of quantum-resistant cryptography introduces into TLS connections requiring Certificate Transparency (CT). We recently shared our call to action to secure quantum…
Lire l’article completWhy is WebAssembly a second-class language on the web?
This post is an expanded version of a presentation I gave at the 2025 WebAssembly CG meeting in Munich. WebAssembly has come a long way since its first release in 2017. The first version of WebAssembly was already a great fit for low-level languages like C and C++, and immediately enabled many new kinds of applications to efficiently target the web. Since then, the WebAssembly CG has dramatically expanded the core capabilities of the…
Lire l’article complet[MàJ] Vulnérabilité dans Cisco Catalyst SD-WAN (25 février 2026)
Agence nationalede la écurité de y tème d'information Une ge tion de ver ion détaillée e trouve à la fin de ce document. Ci co indique que la publication de la ver ion corrective 20.9.8.2 pour Cataly t SD-WAN e t prévue le 27 février 2026. Le ver ion 20.11.x, 20.13.x, 20.14.x et 20.16.x ont affectée par la vulnérabilité mai ne bénéficieront pa de correctif de écurité car elle ont atteint la fin de…
Lire l’article completGoodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148
Cross-site scripting (XSS) remains one of the most prevalent vulnerabilities on the web. The new standardized Sanitizer API provides a straightforward way for web developers to sanitize untrusted HTML before inserting it into the DOM. Firefox 148 is the first browser to ship this standardized security enhancing API, advancing a safer web for everyone. We expect other browsers to follow soon. An XSS vulnerability arises when a website inadvertently lets attackers inject arbitrary HTML…
Lire l’article complet[MàJ] Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile (30 janvier 2026)
Agence nationalede la écurité de y tème d'information Une ge tion de ver ion détaillée e trouve à la fin de ce document. [Mi e à jour du 09 février 2026] Le 6 février 2026, Ivanti a mi à di po ition de cript RPM de détection d'indicateur de compromi ion, à utili er en fonction de la ver ion d'EPMM in tallée. L'éditeur a également mi on guide d'analy e à jour (cf.…
Lire l’article complet