Skip to content
Threat Feed
Subscribe

Product

Google Sheets

3 briefs RSS
high advisory

ClickFix Campaign Activity

Tracking brief for the ClickFix campaign; individual sightings are folded in as reported.

open source packages +51 campaign clickfix
30i updated
high advisory

Google Security Updates — July 2026

Roundup of Google security advisories published in July 2026.

golang.org/x/crypto/ssh +74 roundup
5c 41i updated
medium advisory

Google Workspace Object Copied from External Drive Followed by OAuth Consent

Detects a sequence of events where a user copies a Google Workspace object (spreadsheet, form, document, or script) from an external drive and subsequently grants OAuth permissions to a custom application, potentially indicating a phishing attack leveraging container-bound scripts.

Google Workspace +5 google-workspace oauth phishing initial-access persistence
1r 3t