Search
Articles · 3

SigNoz 0.133.0 Open Redirect Lets Attackers Steal SSO Tokens
SigNoz through 0.133.0 is affected by a reported open redirect in the SSO flow (referenced in NVD as CVE-2026-63094) that lets unauthenticated attackers steal access and refresh tokens from users on Google OAuth, SAML, or OIDC instances. The CVSS 3.1 score of 8.1 from VulnCheck marks it high severity and requires immediate patching on affected self-hosted deployments.

Critical Privilege Escalation Flaw Reported in WordPress Plugin Aimogen Pro
Aimogen Pro for WordPress through version 2.8.4 allows unauthenticated privilege escalation because the aiomatic_call_google_ai_function omits a capability check, letting attackers clear blacklists and run arbitrary PHP such as creating admin accounts. Wordfence rates it critical at CVSS 9.8; the CVE reached NVD on July 17, 2026.

Google opens Android to third-party app stores July 22
Google will allow US third-party app stores to access the Play catalog starting July 22 under the new Play Catalog Access Program. The change complies with the Epic Games court order while imposing $5,000 onboarding and annual fees plus US-only distribution rules.
From the feed · 58
More than 50% of internet traffic is now non-human, a report finds, citing Google's AI overviews as a key driver of the shift.
Anthropic models trail Google and OpenAI on speed and cost efficiency for customer service tasks. NICE Ltd benchmarks show the gap in both latency and per-query pricing.
Gemini 3.6 Flash incorporates direct feedback from the 3.5 version, with side-by-side data now available on quality and token usage.
Google released Gemini 3.6 Flash, 3.5 Flash-Lite, and 3.5 Flash Cyber. The three variants expand the Flash family with targeted capability splits.
Vera Rubin NVL72 production is ramping across 350-plus factory sites in 30 countries. • CoreWeave • Google Cloud • Microsoft Azure • Oracle Cloud Infrastructure
Google unveiled three new Gemini models on July 21, including a 3.6 Flash version, but is already describing Gemini 4 training as its most ambitious run to date.
Three new Gemini models expand the family, optimized for faster inference, higher token efficiency, and reliability at scale.
Light's Flip launches at $299 in a flip design modeled on the Moto Razr. The device strips the experience to core functions only, following the company's $700 Light Phone 3.
Galaxy S26 Ultra's Privacy Display now filters picture-in-picture videos from apps like YouTube while they play on the homescreen. One UI 9 delivers the change.
Google Maps is rolling out a real-time speedometer on Android Auto. The same feature has been available on CarPlay since 2024.
More than 100 Stanford students walked out of Sundar Pichai's commencement speech last month over Google's military contracts and ICE partnerships. Organizers called the deals a modern-day draft.
Google Photos added a one-tap toggle to switch Ask Photos search modes when results fall short.
Google is reportedly developing a frozen chip that embeds Gemini model data directly onto silicon. The design aims to improve efficiency through deeper hardware integration.
Gemini Live now accepts live camera input inside the app. Users tap the icon, point the lens at an object or scene, and ask questions for real-time assistance.
Pixel 6 and 6 Pro reach end of life before Android 17 QPR2 ships in December. The beta that started today marks the cutoff.
Pixel 11 Pro images appeared on Google Fi's site, the first direct sighting from a Google property. Earlier leaks lacked similar confirmation.
Google is rolling out Android 17 QPR2 Beta 1 to Pixel devices as the QPR1 preview cycle winds down.
Google Maps on Android Auto now includes a speedometer display. The addition lands two years after the same feature reached CarPlay.
Marketing images for the Galaxy Watch Ultra 2 leaked two days before Samsung's July 22 event. The renders cover the full rugged smartwatch lineup ahead of the expected announcement.
6-10x efficiency gains for Gemini are the target as Google designs new non-TPU AI server chips with LLM architecture baked in.
Google is notifying Android users that device backups will now count against their Google storage quota. The change affects anyone relying on automatic backups without paid storage.
A leak shows Samsung's Galaxy Z Fold 8 with a wider form factor and complete redesign. Real-life photos reveal the new proportions ahead of launch.
Android Auto is showing early signs of a live speedometer in Google Maps, though the feature remains limited in reach.
Pixel Watch bands start around $10 in Google's latest discount round, with multiple official straps marked down from their usual prices.
Galaxy Watch 9 switches to Qualcomm's Snapdragon Wear Elite processor. Leaked images confirm the change from Samsung's prior silicon.
Google now counts all Android backup data toward Google Account storage limits. Email backups are included in the adjustment.
Google has open-sourced its 3D emoji models. Design questions that stay hidden in 2D, such as whether a face should be a sphere, a mask, or a flat disc, had to be settled before the files could be released.
Xpeng's Mona L03 reaches Europe priced $3,500 below the Tesla Model Y. It adds Google Maps integration and FSD-like driving capability in the same package.
Google revised Gemini quota calculations, so users now receive fewer AI responses than under the prior system.
Over 60 years after Pelé's lost goal at Rua Javari, Google DeepMind has reconstructed the moment from archival footage and historical records in collaboration with experts and his family.
8 AI undressing apps are the target of cease-and-desist letters sent by San Francisco city attorney David Chiu to Apple and Google. The demands cover nonconsensual "nudify" tools in both app stores.
FireSat satellites backed by Google have launched to detect wildfires that existing systems miss, timed with heavy smoke across the US and Canada.
Pixel 11 reportedly gains improved face unlock. The Pixel 11a is said to ship with Tensor G6.
Google redesigned all 3,977 emoji characters to be three-dimensional in Android's Noto set. The company walked through the new design choices to mark World Emoji Day.
Marketing images of the Galaxy Z Fold 8 and Z Fold 8 Ultra have leaked ahead of Galaxy Unpacked, showing the short, stout designs in full detail.
Google Photos is rolling out a floating bottom bar on Android that changes how users navigate the library and search tabs.
Samsung is said to offer free storage upgrades on some Galaxy Z Fold 8 and Flip 8 models, though certain storage variants carry limits.
Google Pixel and Nothing are the two fastest-growing smartphone brands in India, even as the overall market contracts.
XPeng has partnered with Google Maps to power navigation and driving assistance in its vehicles sold outside China. The integration will also underpin the European rollout of its NGP assisted driving system in early 2027.
EU's top court ruled that YouTube loses its passive intermediary defense once it reviews and vets creator channels. The decision limits Google's ability to avoid liability for hosted content.
$699 for Redmagic's Astra 2, a 9-inch Android tablet with Snapdragon 8 Elite Gen 5. • Global pricing confirmed • August launch • US availability included
Over 4,500 Google workers have signed a petition calling for layoff protections. The filing states that "these layoffs and cuts are not difficult decisions, but simply profit being put over the people that make this company run.
Google Contacts is rolling out a "Your information" section for storing and retrieving personal details like phone numbers without external lookups. The feature is starting to appear in the app.
13 AI face-swap apps drew cease-and-desist letters from San Francisco's city attorney this week, ordering Apple and Google to remove them from their stores over documented targeting of women and girls.
Google is fixing an Android lock screen flaw where a multi-touch gesture let Gemini send SMS messages without entering a PIN. The bypass skipped the usual authentication prompt entirely.
Google Health 5.04 is rolling out with custom food logging and additional bug fixes. The update targets nutrition tracking complaints from the prior redesign.
Google Wallet is testing an online age verification system that keeps personal details private during checks.
A flaw in Anthropic's Claude for Chrome extension lets malicious extensions trigger AI actions by simulating clicks, opening access to connected Gmail, Google Docs, Calendar, and Salesforce accounts.
Google is reportedly preparing to let users customize Gemini voices across parameters like speed and energy.
Google added Canva, YouTube Music, and Instacart integrations to AI Mode in Search. Users can now generate designs, playlists, and shopping lists from within the tool.
YouTube Music is reportedly testing fullscreen cover art in the Now Playing view. The trial follows the split-view redesign rolled out earlier this year.
Google is adding support for connecting third-party apps directly in Search AI Mode, letting users link and interact with their services securely.
Intel is expanding its collaboration with Google Cloud. Teams across the company will use Gemini Enterprise to build AI agents for everyday workflows.
Google added Gemini Omni and personal avatars to Google Vids. Users can generate clips from prompts, edit them through chat, and create avatars that match their look and voice.
Google renamed NotebookLM to Gemini Notebook. 3.5 and Antigravity upgrades are coming to AI Pro.
XPeng's L03 ships with Google Maps Auto SDK built in, the first vehicle from an Asia-Pacific automaker to do so. The integration supplies map data to its NGP and XPILOT driver-assistance systems outside China.
Realme confirmed it will exit the China market to focus on global markets instead. The move follows Oppo's restructuring that includes shutting down OnePlus in those same markets.
Google Pixel shipments grew in the latest quarter while global smartphone sales fell to their lowest level since 2013.