InfoSecBulletin Cybersecurity for mankind
A viral story claims that Google has warned all 2.5 billion Gmail users about account risks due to a recent Salesforce breach, but this is false; no such warning exists.
CISA adds PHP2Shell to KEV, PHP Releases New Security Updates to Fix Critical HTTP2Shell flaw
Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw
Daily Cyber security update for 26.10. 2026
The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Google has now responded, that “unfortunately, several inaccurate claims surfaced this week incorrectly claiming we issued a broad warning to all Gmail users about a major Gmail security issue. This is entirely false.”
The company is concerned that the viral nature of the story is creating a “dangerous” sense of panic amongst users. “While it’s always the case that phishers are looking for ways to infiltrate inboxes,” I was told, “our protections continue to block more than 99.9% of phishing and malware attempts from reaching users.”
That doesn’t mean Google and Gmail account are not at risk — of course they are. They remain a prime target for phishing and other attacks — but that’s business as usual. They are not at risk en masse because of a data breach within its B2B ad systems.
Google said, “Gmail’s protections are strong and effective, and claims of a major Gmail security warning are false. We want to reassure our users that Gmail’s protections are strong and effective. Several inaccurate claims surfaced recently that incorrectly stated that we issued a broad warning to all Gmail users about a major Gmail security issue. This is entirely false.
While it’s always the case that phishers are looking for ways to infiltrate inboxes, our protections continue to block more than 99.9% of phishing and malware attempts from reaching users.”
Security is such an important item for all companies, all customers, all users — we take this work incredibly seriously. Our teams invest heavily, innovate constantly, and communicate clearly about the risks and protections we have in place. It’s crucial that conversation in this space is accurate and factual.
As best practices for additional protection, we encourage users to use a secure password alternative like Passkeys, and to follow these best practices to spot and report phishing attacks.”
The company recommends passkeys and a strong form of two-step verification, which means anything but SMS one time codes. An authenticator app is best. But it’s passkeys that are the real stronghold for accounts. They can’t be bypassed or stolen, and they ensure only someone with physical access to your unlocked devices can access your accounts — they can’t be stolen or used remotely. You should also ensure you have a strong, unique password that’s not reused anywhere else.
Hackers’ Reportedly Ultimatum Google To Fire Two Employees: Threaten Data Leak
