🧰 Gmail

The items that name it 10

• Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer
  writeup2026-10-31
• China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
  writeup2026-09-30

  Attachment preview widget cloned in HTML email body to deliver fake attachment links

• Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence
  writeup2026-09-09

  Email platform used to deliver the phishing message in Incident 1

• [tl;dr sec] #343 - Hugging Face Technical Report, AWSHound, OWASP Agentic Skills Top 10
  article2026-08-27It is written here as Gmail (Gemini integration, structural desynchronization).

  Gemini integration, structural desynchronization

• CoSnitch: When Your AI Assistant Becomes Its Own Whistleblower (CVE-2026-24301)
  writeup2026-08-18

  Connected app accessible via Copilot OAuth connectors, used to exfiltrate email contents including passwords

• [tl;dr sec] #341 - Hugging Face Incident Black Hat Talk, CSS Bomb in your Inbox, GitHub Supply Chain Security Improvements
  article2026-08-13It is written here as Gmail (CSS weaponization in webmail clients).

  CSS weaponization in webmail clients

• Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts
  article2026-08-06

  Inbox contents exfiltrated via Atom feed; also monitored for verification codes during account takeover

• Why BEC Is Now an Identity Problem
  article2026-03-05

  Used by attackers to pivot into other SaaS platforms via password reset emails, MFA codes, OAuth authorization workflows, and recovery confirmation links

• Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
  article

  Email renderer whose native attachment preview widget was closely replicated by the threat actor to create a fake attachment card for social engineering.

• What happened after 2,000 people tried to hack my AI assistant — Fernando Irarrázaval
  writeup

  Google email service used by Fiu; account was suspended for three days due to fraud detection triggers from high email volume and rapid API calls