Search
Articles · 13
SigNoz 0.133.0 Open Redirect Lets Attackers Steal SSO Tokens
SigNoz through 0.133.0 is affected by a reported open redirect in the SSO flow (referenced in NVD as CVE-2026-63094) that lets unauthenticated attackers steal access and refresh tokens from users on Google OAuth, SAML, or OIDC instances. The CVSS 3.1 score of 8.1 from VulnCheck marks it high severity and requires immediate patching on affected self-hosted deployments.
Critical Privilege Escalation Flaw Reported in WordPress Plugin Aimogen Pro
Aimogen Pro for WordPress through version 2.8.4 allows unauthenticated privilege escalation because the aiomatic_call_google_ai_function omits a capability check, letting attackers clear blacklists and run arbitrary PHP such as creating admin accounts. Wordfence rates it critical at CVSS 9.8; the CVE reached NVD on July 17, 2026.
Google opens Android to third-party app stores July 22
Google will allow US third-party app stores to access the Play catalog starting July 22 under the new Play Catalog Access Program. The change complies with the Epic Games court order while imposing $5,000 onboarding and annual fees plus US-only distribution rules.
Samsung Health requires AI data consent or deletes user records
Samsung Health now requires users to consent to their data being used for AI training and human review or the app will delete the data and stop syncing it. The policy covers step counts, sleep, medication, cycle tracking and full health records, arriving alongside a redesign of the service.
Google Phone G4HCD Receives FCC Approval
Google received FCC equipment authorization for the Phone G4HCD on July 13, 2026. The approval covers operation across ten frequency bands and includes dozens of supporting test reports required for market entry.
Google sets August 31 for full Manifest V2 extension removal
Google will remove all Manifest V2 extensions from the Chrome Web Store on August 31, 2026. The move completes a four-year transition to Manifest V3, which the company says is more secure but has drawn criticism for restricting ad blockers and similar tools.
Google sets August date for Pixel 11 hardware event in New York
Google will hold its upcoming Made by Google event on August 12 in New York City, an invitation received by The Verge states. An animated clip in the message hints at a gold-colored handset belonging to the Pixel 11 lineup.
Google, FBI disrupt NetNut proxy botnet of 2M devices
Google and partners including the FBI have disrupted the NetNut residential proxy botnet, cutting off an estimated 2 million compromised Android devices used by hundreds of threat actors. The operation degrades a major tool for concealing cyberattacks and is expected to ripple through the interconnected proxy services industry.
Europe's Highest Court Rejects Google's Appeal of $4.7 Billion Antitrust Penalty
Europe's top court upheld an approximately $4.7 billion antitrust penalty targeting Google for allegedly abusing Android's dominance through pre-installation deals with device makers. The ruling ends years of appeals, follows a reduction by a lower court, and comes as the EU expands oversight of large technology platforms under new rules while drawing criticism from U.S. officials.
Google Brings Gemini Spark to macOS With Local File Automation
Google introduced Gemini Spark in its macOS app to let the AI automate actions on local files, such as sorting PDFs into folders or pulling invoice details for scheduled spreadsheets. The expansion adds third-party service links, custom MCP server support, and real-time monitoring of selected topics, currently restricted to beta access for qualifying subscribers.
Cloudflare to block mixed-purpose bots from ad-supported sites by default
Cloudflare will block mixed-use crawlers from ad-supported pages by default beginning September 15, 2026, aiming to protect publisher revenue from unpermitted AI training scrapes while still allowing search indexing. The policy affects bots from Apple, Google, and Microsoft that combine indexing with data harvesting and encourages clearer separation of those activities.
Google to lower Play Store fees in US, Europe, UK on June 30
Google is set to implement lower Play Store fees and external payment options in Europe, the UK, and the US starting June 30 as part of its Epic Games settlement. The changes introduce a 10 percent service fee on the first $1 million in annual earnings for small developers and expand globally through 2027.
DeepMind partners with A24 on AI film tools after Google invests $75 million
DeepMind is collaborating with A24 to create AI systems for film production and distribution. The business daily reported that Google is investing around $75 million in the studio, marking its first equity stake in a movie company. The non-exclusive multiyear agreement stresses artist-guided development while surfacing Hollywood worries about training data and alleged copyright issues.
From the feed · 58
Gboard is rolling out a Material 3 Expressive redesign to its shortcuts page on Android after months of testing.
Google Meet is rolling out a homepage redesign on the web that adds an agenda view to organize meetings from prep through follow-up.
Gemini 3.5 Flash-Lite targets high-volume repetitive tasks such as ticket sorting and data extraction. Google DeepMind positions the model as a faster, lower-cost option versus standard 3.5 Flash.
More than 50% of internet traffic is now non-human, a report finds, citing Google's AI overviews as a key driver of the shift.
Anthropic models trail Google and OpenAI on speed and cost efficiency for customer service tasks. NICE Ltd benchmarks show the gap in both latency and per-query pricing.
Gemini 3.6 Flash incorporates direct feedback from the 3.5 version, with side-by-side data now available on quality and token usage.
Google released Gemini 3.6 Flash, 3.5 Flash-Lite, and 3.5 Flash Cyber. The three variants expand the Flash family with targeted capability splits.
Vera Rubin NVL72 production is ramping across 350-plus factory sites in 30 countries. • CoreWeave • Google Cloud • Microsoft Azure • Oracle Cloud Infrastructure
Google unveiled three new Gemini models on July 21, including a 3.6 Flash version, but is already describing Gemini 4 training as its most ambitious run to date.
Three new Gemini models expand the family, optimized for faster inference, higher token efficiency, and reliability at scale.
Light's Flip launches at $299 in a flip design modeled on the Moto Razr. The device strips the experience to core functions only, following the company's $700 Light Phone 3.
Galaxy S26 Ultra's Privacy Display now filters picture-in-picture videos from apps like YouTube while they play on the homescreen. One UI 9 delivers the change.
Google Maps is rolling out a real-time speedometer on Android Auto. The same feature has been available on CarPlay since 2024.
More than 100 Stanford students walked out of Sundar Pichai's commencement speech last month over Google's military contracts and ICE partnerships. Organizers called the deals a modern-day draft.
Google Photos added a one-tap toggle to switch Ask Photos search modes when results fall short.
Google is reportedly developing a frozen chip that embeds Gemini model data directly onto silicon. The design aims to improve efficiency through deeper hardware integration.
Gemini Live now accepts live camera input inside the app. Users tap the icon, point the lens at an object or scene, and ask questions for real-time assistance.
Pixel 6 and 6 Pro reach end of life before Android 17 QPR2 ships in December. The beta that started today marks the cutoff.
Pixel 11 Pro images appeared on Google Fi's site, the first direct sighting from a Google property. Earlier leaks lacked similar confirmation.
Google is rolling out Android 17 QPR2 Beta 1 to Pixel devices as the QPR1 preview cycle winds down.
Google Maps on Android Auto now includes a speedometer display. The addition lands two years after the same feature reached CarPlay.
Marketing images for the Galaxy Watch Ultra 2 leaked two days before Samsung's July 22 event. The renders cover the full rugged smartwatch lineup ahead of the expected announcement.
6-10x efficiency gains for Gemini are the target as Google designs new non-TPU AI server chips with LLM architecture baked in.
Google is notifying Android users that device backups will now count against their Google storage quota. The change affects anyone relying on automatic backups without paid storage.
A leak shows Samsung's Galaxy Z Fold 8 with a wider form factor and complete redesign. Real-life photos reveal the new proportions ahead of launch.
Android Auto is showing early signs of a live speedometer in Google Maps, though the feature remains limited in reach.
Pixel Watch bands start around $10 in Google's latest discount round, with multiple official straps marked down from their usual prices.
Galaxy Watch 9 switches to Qualcomm's Snapdragon Wear Elite processor. Leaked images confirm the change from Samsung's prior silicon.
Google now counts all Android backup data toward Google Account storage limits. Email backups are included in the adjustment.
Google has open-sourced its 3D emoji models. Design questions that stay hidden in 2D, such as whether a face should be a sphere, a mask, or a flat disc, had to be settled before the files could be released.
Xpeng's Mona L03 reaches Europe priced $3,500 below the Tesla Model Y. It adds Google Maps integration and FSD-like driving capability in the same package.
Google revised Gemini quota calculations, so users now receive fewer AI responses than under the prior system.
Over 60 years after Pelé's lost goal at Rua Javari, Google DeepMind has reconstructed the moment from archival footage and historical records in collaboration with experts and his family.
8 AI undressing apps are the target of cease-and-desist letters sent by San Francisco city attorney David Chiu to Apple and Google. The demands cover nonconsensual "nudify" tools in both app stores.
FireSat satellites backed by Google have launched to detect wildfires that existing systems miss, timed with heavy smoke across the US and Canada.
Pixel 11 reportedly gains improved face unlock. The Pixel 11a is said to ship with Tensor G6.
Google redesigned all 3,977 emoji characters to be three-dimensional in Android's Noto set. The company walked through the new design choices to mark World Emoji Day.
Marketing images of the Galaxy Z Fold 8 and Z Fold 8 Ultra have leaked ahead of Galaxy Unpacked, showing the short, stout designs in full detail.
Google Photos is rolling out a floating bottom bar on Android that changes how users navigate the library and search tabs.
Samsung is said to offer free storage upgrades on some Galaxy Z Fold 8 and Flip 8 models, though certain storage variants carry limits.
Google Pixel and Nothing are the two fastest-growing smartphone brands in India, even as the overall market contracts.
XPeng has partnered with Google Maps to power navigation and driving assistance in its vehicles sold outside China. The integration will also underpin the European rollout of its NGP assisted driving system in early 2027.
EU's top court ruled that YouTube loses its passive intermediary defense once it reviews and vets creator channels. The decision limits Google's ability to avoid liability for hosted content.
$699 for Redmagic's Astra 2, a 9-inch Android tablet with Snapdragon 8 Elite Gen 5. • Global pricing confirmed • August launch • US availability included
Over 4,500 Google workers have signed a petition calling for layoff protections. The filing states that "these layoffs and cuts are not difficult decisions, but simply profit being put over the people that make this company run.
Google Contacts is rolling out a "Your information" section for storing and retrieving personal details like phone numbers without external lookups. The feature is starting to appear in the app.
13 AI face-swap apps drew cease-and-desist letters from San Francisco's city attorney this week, ordering Apple and Google to remove them from their stores over documented targeting of women and girls.
Google is fixing an Android lock screen flaw where a multi-touch gesture let Gemini send SMS messages without entering a PIN. The bypass skipped the usual authentication prompt entirely.
Google Health 5.04 is rolling out with custom food logging and additional bug fixes. The update targets nutrition tracking complaints from the prior redesign.
Google Wallet is testing an online age verification system that keeps personal details private during checks.
A flaw in Anthropic's Claude for Chrome extension lets malicious extensions trigger AI actions by simulating clicks, opening access to connected Gmail, Google Docs, Calendar, and Salesforce accounts.
Google is reportedly preparing to let users customize Gemini voices across parameters like speed and energy.
Google added Canva, YouTube Music, and Instacart integrations to AI Mode in Search. Users can now generate designs, playlists, and shopping lists from within the tool.
YouTube Music is reportedly testing fullscreen cover art in the Now Playing view. The trial follows the split-view redesign rolled out earlier this year.
Google is adding support for connecting third-party apps directly in Search AI Mode, letting users link and interact with their services securely.
Intel is expanding its collaboration with Google Cloud. Teams across the company will use Gemini Enterprise to build AI agents for everyday workflows.
Google added Gemini Omni and personal avatars to Google Vids. Users can generate clips from prompts, edit them through chat, and create avatars that match their look and voice.
Google renamed NotebookLM to Gemini Notebook. 3.5 and Antigravity upgrades are coming to AI Pro.