Skip to content
Threat Feed
Subscribe

Product

Google Forms

3 briefs RSS
medium advisory

West African Fraud Actors Targeting Universities via Compromised .edu Accounts

West African threat actors are leveraging compromised university email accounts to distribute job-based advance fee fraud by harvesting credentials via legitimate third-party form services.

Google Forms +4 phishing fraud advance-fee-fraud higher-education social-engineering
2t
high advisory

Google Security Updates — July 2026

Roundup of Google security advisories published in July 2026.

golang.org/x/crypto/ssh +74 roundup
5c 41i updated
medium advisory

Google Workspace Object Copied from External Drive Followed by OAuth Consent

Detects a sequence of events where a user copies a Google Workspace object (spreadsheet, form, document, or script) from an external drive and subsequently grants OAuth permissions to a custom application, potentially indicating a phishing attack leveraging container-bound scripts.

Google Workspace +5 google-workspace oauth phishing initial-access persistence
1r 3t