Security News
A U.S. district judge has dismissed New Mexico's privacy claims against Google over privacy concerns, but New Mexico's top prosecutor vowed Monday to continue the legal fight to protect child privacy rights. "The law is clear that Google must protect our children's privacy, and we strongly disagree with the court's ruling," New Mexico Attorney General Hector Balderas said in a statement to The Associated Press.
Privacy-focused search engine DuckDuckGo will no longer appear on Google's European search preference menu for Android in most countries, despite being the most popular choice after Google. In 2019 Google agreed to provide Android users a prompt for selecting the default search provider, in response to a July 2018 decision by the European Commission that Google has been abusing its dominant position by tying the Google search app with the Play Store.
Privacy-focused search engine DuckDuckGo will no longer appear on Google's European search preference menu for Android in most countries, despite being the most popular choice after Google. In 2019 Google agreed to provide Android users a prompt for selecting the default search provider, in response to a July 2018 decision by the European Commission that Google has been abusing its dominant position by tying the Google search app with the Play Store.
The Joker malware has been a persistent thorn in Google's side as it keeps popping up in shady apps to infect users of the Google Play store. Google has long been locked in a battle with cybercriminals who create and submit malicious apps to the Play store that somehow sneak past the company's protections.
Google this week announced the availability of Chronicle Detect, a threat detection solution for enterprises from Google Cloud. The tool is meant to help organizations depart from legacy security tools and adopt a modern threat detection system, Google says.
Google recently patched a privilege escalation vulnerability in OS Config, a Google Cloud Platform service for Compute Engine that is designed for managing operating systems running on virtual machine instances. Google says the OS Config service API and agent allow users to perform various tasks across a group of VM instances, including applying patches, collecting and reviewing OS information, and installing, removing and updating software packages.
Google has stomped out several serious code-execution flaws in its Chrome browser. The high-severity flaws include an out-of-bounds read error in storage in Google Chrome.
Six percent of all Google Cloud buckets are misconfigured and left open to the public internet, for anyone to access their contents. In a survey of 2,064 Google Cloud buckets by Comparitech, 131 of them were found to be vulnerable to unauthorized access by users who could list, download and/or upload files.
Google is providing a new "Risky files" scanning feature to Chrome users enrolled in its Advanced Protection Program. Chrome started warning APP users when a downloaded file may be malicious last year, but now it will also give them the ability to send risky files for additional scanning by Google Safe Browsing's full suite of malware detection technology before opening them.
Google is taking the step of prohibiting "Stalkerware" in Google Play, along with apps that could be used in political-influence campaigns. Google also specified that any consent-based tracking-related apps distributed on the Play Store must comply with certain parameters.