Red Dog Security

Google has patched a vulnerability that allowed malicious Google Calendar invitations to remotely control Gemini agents running on a victim’s device and exfiltrate sensitive data. Gemini is Google’s large language model (LLM), integrated into Android, Google web services, and Google Workspace applications, with direct access to Gmail, Calendar,

Security researchers at Eclypsium have demonstrated a novel attack dubbed “BadCam” at DEF CON 33, revealing vulnerabilities in certain Lenovo webcam models that can be remotely repurposed as BadUSB attack tools. Key Details of the BadCam Attack (CVE-2025-4371) * First real-world demonstration of remotely hijacking Linux-based USB peripherals for malicious purposes.

Security analysts at Binarly have identified at least 35 Docker Hub images still infected with the backdoor that compromised xz Utils last year. Researchers warn this poses a serious supply chain risk to users, organizations, and their data. Supply Chain Risk in CI/CD Pipelines Many CI/CD pipelines, developers,

Researchers at Dr. Web have uncovered a sophisticated Android backdoor targeting Russian business representatives. The malware offers extensive surveillance and data theft capabilities, including: * Recording conversations * Streaming live camera footage * Stealing data from messengers and browsers * Keylogging Malware Evolution and Targeting Dubbed Android.Backdoor.916.origin, the Kotlin-based malware first

More than 29,000 Microsoft Exchange servers remain unpatched against CVE-2025-53786, a severe security flaw that could allow attackers to move laterally into Microsoft cloud environments and potentially achieve full domain compromise. How the Vulnerability Works The flaw allows attackers with administrative access to on-premises Exchange servers to escalate privileges