Google

United States3 products listed
Secure your organization with Google Cloud. Get AI-powered SecOps, threat intelligence, and the most trusted cloud security to stay ahead of threats.
In their own words cloud.google.com

Our summaryGoogle Cloud's security business includes Mandiant consulting and Google Security Operations. Google's threat research is published by the Google Threat Intelligence Group and Project Zero.

Products listed
3
Research stories
270
Incidents and advisories
263
Indicators
537

Google in our news, month by month

ResearchIncidents and advisories

Products and the controls they provide

Google Security Operations

“Google Security Operations, formerly known as Chronicle, enables security teams to detect, investigate, and respond to threats with the speed, scale, and intelligence of Google.”

Cloud SIEM and SOAR, formerly Chronicle.

Product page

Mandiant Incident Response

“Learn how Mandiant incident response services help with every step of crisis response, from detection and investigation to analysis and remediation.”

Incident response services from Mandiant, available on retainer.

Product page

Google Threat Intelligence

“Google Threat Intelligence: visibility into the latest threats with curated cyber threat intel from the frontlines, our intel analysts, OSINT, and threat insights from Google.”

Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.

Product page

External reviews

Independent tests, peer reviews and articles about Google. We link to them; we did not write or commission them, and nobody pays to appear here.

Research by Google

Stories in our coverage based on what researchers at Google found or reported: 270 in total.

Incidents and advisories

Stories where a Google product had a vulnerability or was attacked, or Google itself was: 263 in total. Useful if you run its products.

Indicators from these storieslatest 30 of 537 · show
TypeIndicatorStory
malwareCoGUIGlobal takedown hits network behind 1 billion phishing messages
malwareHaoziGlobal takedown hits network behind 1 billion phishing messages
malwareIron Man SystemGlobal takedown hits network behind 1 billion phishing messages
malwareStorm-2990Global takedown hits network behind 1 billion phishing messages
malwareStorm-3119Global takedown hits network behind 1 billion phishing messages
malwareMidnight MimosaMidnight Mimosa Malware Found Preinstalled on Low-Cost Android Phones
domaingoogle.asAttackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
domaingoogle.com.ghAttackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
domaingoogle.com.slAttackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
domaingoogle.slAttackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
domainwww.google.asAttackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
domainwww.google.com.slAttackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
domainwww.google.slAttackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
domainwww.youtube.slAttackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
domainyoutube.asAttackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
domainyoutube.com.ghAttackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
domainyoutube.slAttackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
cveCVE-2026-106197Chrome 155 Update Patches 247 Vulnerabilities
cveCVE-2026-106347Chrome 155 Update Patches 247 Vulnerabilities
cveCVE-2026-106358Chrome 155 Update Patches 247 Vulnerabilities
cveCVE-2026-106382Chrome 155 Update Patches 247 Vulnerabilities
cveCVE-2026-102331Chrome, Firefox Updates Patch Over 100 Vulnerabilities
malwarePoper BlockerChrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions
malwareCLOSEDQUORUMIn Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure
malwaresckitIn Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure
cveCVE-2025-68788Windows, Linux, Android File Notification Systems Leak User Activity
hash_sha25616447c70f8e3c99de95b92846460214a661915c89f5c10965bf18da4c279880aMalicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts
hash_sha256dc717b5ab9a8eccf6b6187880ba90b004cb00f503ff8bceb8405ccc33d1c6e3eMalicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts
hash_sha256f1b8329075b1cbd1ae0a5dc947bd00f94642cb166a86c2455a1d0b10aee9f2b1Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts
urlhttps://pdf.gusercontent.com/api/accounts/collect/?leadId=&email=&data=Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts
Vendor Watch

Run Google?

Get an email when a reviewed story names Google, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

From Google

Is this your company, or did we get something wrong?

Tell us what to fix on this page: a product, a description, a link or a review. We check every suggestion before changing anything, and listing stays free and editorial.

How we list vendors

  • A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
  • Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
  • Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
  • Logos, product names and quoted text belong to the vendors and are shown to identify them.
  • Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.