SANS ISC (2026-04-30): a fake Homebrew Google sponsored ad drops MacSync Stealer through a 225-byte zsh that fans out into 1,448- and 2,647-byte stages, fakes a 'System Preferences' osascript dialog, and ships Keychain, browser data, crypto wallets, and `.ssh` to glowmedaesthetics[.]com over plain HTTP. IoCs, detection points, and MITRE ATT&CK mapping included.
Verdict on GTIG's May 11, 2026 report: the first confirmed AI-generated zero-day, a Python 2FA bypass for an OSS admin tool, was caught by a hallucinated CVSS score and textbook Pythonic code structure.
Google extended Binary Transparency to its Android apps and Mainline modules starting May 2026. How the public log and verification tools differ from code signing, what's actually covered, and what the ADB-based verification workflow looks like for researchers.
Tested Gemma 4 MTP drafter on M1 Max 64GB with mlx-vlm 0.5.0. Only the 26B A4B MoE got +13%; 31B Dense and E4B got slower. Code gen vs short haiku prompts flip the result.
Reading Google's MTP drafter docs, vLLM recipes, and the AI for Developers guide. The 3x claim holds for 31B Dense but 26B A4B MoE stalls at batch 1 because speculative decoding verification loads extra expert weights per candidate token.
Practical findings from someone who published 18 Chrome extensions over 6 months: what moved installs (titles, short descriptions, screenshots, review prompts) and how the Manifest V2 to V3 migration affects install rates.
Unconfirmed ranking fluctuations were reported around April 27-28. March 2026 core update finished April 8. Separate the volatility from Search Console and GA4 reporting delays.
Google launched Android CLI v0.7 preview on April 16, 2026. Subcommands like android create/run/skills/docs, combined with Android Knowledge Base and Android Skills, let any agent (Gemini CLI, Claude Code, Codex) drive Android development through a standardized interface.
Google DeepMind's AI writing tool Fabula was demoed at CHI 2026. Co-designed with 42 professional writers and built on convergent iteration for story structuring and refinement, but it was first announced around September 2025 and remains a research prototype with no GA in sight.
Anthropic expands its partnership with Google and Broadcom to secure multi-gigawatt TPU infrastructure targeting 2027 operations. Annual revenue run rate surpasses $30B, with enterprise customers spending over $1M exceeding 1,000.
Google Drive's AI ransomware detection and recovery feature is now generally available with 14x improved detection. But Google's history of false-positive account bans raises questions about relying on Drive as primary storage.
Google DeepMind has released Gemma 4: four models—31B dense, 26B MoE (A4B), E4B, and E2B—with a 256K context, multimodal input, tool calling, and support for 140 languages.
