Unit 42's three Pass-ta-key attacks need malware already on Windows, no admin rights. The SDS master key sits in Chrome memory in plaintext, with no way to rotate it.
AFM 3 splits into 20B on-device sparse (NAND-to-DRAM weight loading) and Cloud Pro on Google Cloud NVIDIA GPU. Three Google contexts, Foundation Models API opening, and what's still unreleased.
35M linear projection replaces E4B's 150M 16-layer Vision Encoder. Bidirectional attention in the 48-layer LLM absorbs patch features. Comparison with Fuyu, EVE, EVEv2, and Mono-InternVL.
SANS ISC (2026-04-30): a fake Homebrew Google sponsored ad drops MacSync Stealer through a 225-byte zsh that fans out into 1,448- and 2,647-byte stages, fakes a 'System Preferences' osascript dialog, and ships Keychain, browser data, crypto wallets, and `.ssh` to glowmedaesthetics[.]com over plain HTTP. IoCs, detection points, and MITRE ATT&CK mapping included.
Verdict on GTIG's May 11, 2026 report: the first confirmed AI-generated zero-day, a Python 2FA bypass for an OSS admin tool, was caught by a hallucinated CVSS score and textbook Pythonic code structure.
Google extended Binary Transparency to its Android apps and Mainline modules starting May 2026. How the public log and verification tools differ from code signing, what's actually covered, and what the ADB-based verification workflow looks like for researchers.
Tested Gemma 4 MTP drafter on M1 Max 64GB with mlx-vlm 0.5.0. Only the 26B A4B MoE got +13%; 31B Dense and E4B got slower. Code gen vs short haiku prompts flip the result.
Reading Google's MTP drafter docs, vLLM recipes, and the AI for Developers guide. The 3x claim holds for 31B Dense but 26B A4B MoE stalls at batch 1 because speculative decoding verification loads extra expert weights per candidate token.
Practical findings from someone who published 18 Chrome extensions over 6 months: what moved installs (titles, short descriptions, screenshots, review prompts) and how the Manifest V2 to V3 migration affects install rates.
Unconfirmed ranking fluctuations were reported around April 27-28. March 2026 core update finished April 8. Separate the volatility from Search Console and GA4 reporting delays.
Google launched Android CLI v0.7 preview on April 16, 2026. Subcommands like android create/run/skills/docs, combined with Android Knowledge Base and Android Skills, let any agent (Gemini CLI, Claude Code, Codex) drive Android development through a standardized interface.
Google DeepMind's AI writing tool Fabula was demoed at CHI 2026 by Piotr Mirowski. Co-designed with 42 professional writers using convergent iteration for story structure. But the timeline shows Fabula was first demoed in May 2025 and entered early access in September 2025 — still a research prototype with no general availability.
