Attention: You are using an outdated browser, device or you do not have the latest version of JavaScript downloaded and so this website may not work as expected. Please download the latest software or switch device to avoid further issues.
| 21 Apr 2026 | |
| Written by Gabi Gerber | |
| Attacks & Threats |
| Security Operation Center, Hacking Topics |
AI-Driven Pushpaganda Exploits Google Discover to for Ad Fraud — A novel ad fraud scheme has been found to leverage search engine poisoning (SEO) techniques and artificial intelligence (AI)-generated content to push deceptive news stories into Google's Discover feed and trick users into enabling persistent browser notifications that lead to scareware and financial scams. The Pushpaganda campaign has been found to target the personalized content feeds of Android and Chrome users. "This operation, named for push notifications central to the scheme, generates invalid organic traffic from real mobile devices by tricking users into subscribing to enabling notifications that presented alarming messages," HUMAN Security said. Google has since rolled out fixes and algorithmic updates to address the issue.
Those closest to executives must match their security postures because the weakest link in a family can become the entry point for attacks. More...
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, includin… More...
Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it. More...
Organizations don't need better vulnerability scanners; they need to know who owns their assets and has the authority an… More...
Threat actors are now hiding payloads by using DNS TXT records and browser cache pre-fetching, making it tougher to spot… More...
Those closest to executives must match their security postures because the weakest link in a family can become the entry point for attacks. More...
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, includin… More...
Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it. More...
Organizations don't need better vulnerability scanners; they need to know who owns their assets and has the authority an… More...
Threat actors are now hiding payloads by using DNS TXT records and browser cache pre-fetching, making it tougher to spot… More...