Product
high
advisory
Google Security Updates — July 2026
5 CVEs 41 IOCsRoundup of Google security advisories published in July 2026.
golang.org/x/crypto/ssh +74
roundup
5c
41i
updated
medium
advisory
Google Workspace Object Copied from External Drive Followed by OAuth Consent
1 rule 3 TTPsDetects a sequence of events where a user copies a Google Workspace object (spreadsheet, form, document, or script) from an external drive and subsequently grants OAuth permissions to a custom application, potentially indicating a phishing attack leveraging container-bound scripts.
Google Workspace +5
google-workspace
oauth
phishing
initial-access
persistence
1r
3t