Google announces that Android had a total of 107 vulnerabilities through which hackers could infiltrate, but it has already been fixed

Google has disclosed two actively exploited zero-day vulnerabilities in its most recent monthly security update for Android devices. The vulnerabilities, identified as CVE-2025-48633 and CVE-2025-48572, are high-severity flaws affecting the Android framework, allowing attackers to access information and escalate privileges. Despite their severity, they have not yet been included in the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) catalog of known exploited vulnerabilities. Issues with Android The December security notice is significant, as it includes a total of 107 […]

Google has disclosed two actively exploited zero-day vulnerabilities in its most recent monthly security update for Android devices. The vulnerabilities, identified as CVE-2025-48633 and CVE-2025-48572, are high-severity flaws that affect the Android framework, allowing attackers to access information and escalate privileges. Despite their severity, they have not yet been included in the catalog of known exploited vulnerabilities by the U.S. Cybersecurity and Infrastructure Security Agency (CISA).

Problems with Android

The December security notice is significant, as it includes a total of 107 resolved defects, making this the second highest number of patched vulnerabilities this year, only surpassed by the 120 fixed in September. This year has been irregular in terms of vulnerability disclosure, with months where no defects were reported, such as July and October, and a total of only six vulnerabilities in August.

The latest Google update features two patch levels —2025-12-01 and 2025-12-05— that will allow Android partners to address common vulnerabilities across different devices. Android device manufacturers typically release security updates according to their own schedule, customizing operating system updates for their specific hardware.

It has also been indicated that the most critical vulnerability addressed in this patch is CVE-2025-48631, which could allow an attacker to carry out a remote denial of service attack without the need for additional privileges. The update includes fixes for various areas, from the framework and system to critical components from manufacturers such as Qualcomm and MediaTek.

Finally, it has been confirmed that the source code for all the vulnerabilities addressed in this update will be released in the Android Open Source Project repository on Wednesday.

Google has just sued the Chinese hacker group that stole 1 billion dollars from millions of its users

Google has sued “Lighthouse Enterprise,” a major global fraudulent operation from China that facilitated the theft of millions of credit cards and hundreds of millions of dollars. In a federal lawsuit recently filed in the Southern District of New York, Google revealed its plans to sue a group of foreign criminals for carrying out a massive phishing-as-a-service (PhaaS) operation. According to the lawsuit, the group created and sold a phishing kit called Lighthouse, which allowed even novice criminals to create fake websites that mimicked trusted institutions. The kit, advertised […]

Google has sued “Lighthouse Enterprise,” a major global fraudulent operation from China that facilitated the theft of millions of credit cards and hundreds of millions of dollars.

In a federal lawsuit recently filed in the Southern District of New York, Google revealed its plans to sue a group of foreign criminals for carrying out a massive phishing operation as a service (PhaaS).

According to the lawsuit, the group created and sold a phishing kit called Lighthouse, which even allowed novice criminals to create fake websites that imitated trusted institutions. The kit, advertised through Telegram and YouTube, offered hundreds of templates and pre-made tools to launch large-scale smishing and e-commerce scams, and allowed users to create fake websites that impersonated government agencies, financial corporations, and, among others, Google.

Google has sued them for using the company’s logo and its identity

Google claims that, in a period of 20 days, the Lighthouse platform was used to create 200,000 fake websites, which targeted more than a million victims in 121 countries.

Citing researchers, Google estimates that between 12.7 and 115 million credit cards in the United States may have been compromised through Lighthouse-driven attacks.

The exact number of people involved in the operation is unknown. In the lawsuit, the individuals are labeled as “Doe” 1-25, although Google acknowledged that the actual number of people is likely much higher.

In some cases, criminals created fake text messages about the delivery of USPS packages or alerted victims about pending toll payments. Sometimes, they created fake online stores that stole users’ payment data and often used the stolen information to charge victims’ credit cards in digital wallets and make unauthorized payments.

Google claims that Lighthouse operators misused Google logos and trademarks, published ads through Google Ads, and even uploaded tutorials to YouTube showing how to carry out the scams.

Hackers damaged Google’s reputation, violated its terms of service, and forced it to spend hundreds of hours investigating and shutting down fraudulent accounts, the company concluded.

By the way, this is not the first time Google has sued Chinese citizens for cyber crimes, but most of the time the lawsuits lead to nothing, as China rarely extradites its citizens to the United States, especially when it comes to cyber crimes.

Working for Google but sleeping in the parking lot: the reality of rents

Recently, the harsh reality faced by some Google employees has come to light, despite working at one of the richest and most prestigious tech companies in the world. The widespread perception is that employment at giants like Google guarantees the resolution of financial problems, but the situation of many workers tells a different story. The case of Kento Morita highlights these difficulties. Morita, who joined Google’s artificial intelligence department, found himself at a crossroads upon discovering the exorbitant rental prices in the Mountain View area. An international housing problem […]

Recently, the harsh reality faced by some Google employees has come to light, despite working at one of the richest and most prestigious tech companies in the world.

The widespread perception is that employment at giants like Google guarantees the resolution of financial problems, but the situation of many workers tells a different story. The case of Kento Morita highlights these difficulties.

Morita, who joined Google’s artificial intelligence department, found herself at a crossroads upon discovering the exorbitant rental prices in the Mountain View area.

An international housing problem

With prices hovering around 3,600 dollars a month, the search for affordable housing has become a monumental challenge. Despite his job at Google, his income was not enough to maintain an adequate standard of living in the region.

Faced with this unsustainable reality, Morita chose an extreme solution: to live in his car. By using the campus facilities, such as restaurants with free food and gyms to shower, he managed to stay afloat temporarily. However, this situation was unsustainable.

After being discovered by a security guard, he was forced to leave the parking lot and moved to a caravan area, where many of his colleagues were also looking for alternatives to cope with the rental crisis.

Despite working at one of the most iconic companies in the world, the quality of life for some of its employees is poor and contradicts the idealized image that many have.

This phenomenon is not isolated; there is a growing group of workers who live in caravans and meet monthly to share their experiences and support each other in the face of the harshness of the real estate market in the area. Together, these stories reveal that the job dream at Google does not always translate into financial stability.

Google launches a tool to automatically convert ads into videos

Google has launched a new tool that automatically transforms images and text from ads into videos for its Demand Generation campaigns. This functionality will apply to all ad groups that only contain images created before August 27. The generated videos will start being published automatically from October 31, unless advertisers choose to opt out of the process. October 31: deadline The new feature is designed to expand advertisers’ creative library without incurring additional production costs. By converting static ads into assets in […]

Google has launched a new tool that automatically transforms images and text from ads into videos for its Demand Generation campaigns. This feature will apply to all ad groups that only contain images created before August 27. The generated videos will start being published automatically from October 31, unless advertisers choose to opt out of the process.

October 31: deadline

The new feature is designed to expand advertisers’ creative library without incurring additional production costs. By converting static ads into video format assets, brands will be able to reach their audiences across various platforms, including YouTube, Shorts, and Discover. This is particularly relevant, as video formats tend to generate higher engagement and better performance in Demand Generation campaigns, resulting in greater exposure and flexibility for brands.

However, since this feature is activated automatically, advertisers are required to review and manage their assets before October 31. It is crucial to ensure that the videos generated by artificial intelligence align with the brand’s standards and messages to avoid any communication mismatches.

With this innovation, Google aims not only to optimize the way ads are presented but also to respond to the growing demand for dynamic content in the digital world. The transformation of static creatives into visual content can significantly increase the impact of campaigns, although it also gives advertisers a limited window to decide their participation. If these assets are not managed properly, there is a risk that the brand’s message will not be effectively communicated to its target audience.

Google will introduce ads in the AI Overviews starting at the end of the year

Google has confirmed that it will begin implementing ads within AI Overviews in select English-speaking markets, beyond the United States, by the end of 2025. This functionality was recently announced during the Google Access event and marks a significant shift in how advertisers can reach users. New challenges for advertisers The AI Overviews, which provide AI-generated answers to complex and multifaceted queries, will allow ads to appear alongside these summaries, instead of the traditional text results. This approach represents a unique opportunity for […]

Google has confirmed that it will begin implementing ads within the AI Overviews in select English-speaking markets, beyond the United States, by the end of 2025. This functionality was recently announced during the Google Access event and marks a significant change in the way advertisers can reach users.

New challenges for advertisers

The AI Overviews, which provide AI-generated answers to complex and multifaceted queries, will allow ads to appear alongside these summaries, instead of traditional text results. This approach represents a unique opportunity for brands, as they will be able to integrate more directly into the search experience, but it also poses a challenge as it requires advertisers to rethink their strategies to optimize visibility and intent within a more conversational search environment.

The gradual implementation of this advertising format will allow advertisers and users to adapt to the new methods of ad placement and collect data on their performance in these new settings. This process could provide valuable insights into how artificial intelligence generation affects the visibility and performance of ads in searches.

As Frederik Boysen, CEO of Profitmetrics.io, highlighted, this change in advertising represents both an opportunity for greater interaction with users and a challenge for those who must optimize their strategies in a new market dynamic. As artificial intelligence becomes a central component of searches, advertisers must be prepared to adapt their approach to this new technological landscape.

Share of Search: the new KPI that every marketing professional should know

The Share of Search has consolidated itself as a key performance indicator essential in the field of marketing, measuring the percentage of searches for a brand compared to its competitors. This KPI is crucial for determining consumer visibility and interest, as an increase in Share of Search often anticipates future market growth. A KPI to keep in mind from now on Unlike Market Share and Share of Voice, which focus on past sales and advertising respectively, Share of Search captures intent […]

The Share of Search has established itself as a key performance indicator essential in the field of marketing, measuring the percentage of searches for a brand compared to its competitors. This KPI is crucial for determining visibility and consumer interest, as an increase in Share of Search often anticipates future growth in the market.

A KPI to keep in mind from now on

Unlike Market Share and Share of Voice, which focus on past sales and advertising respectively, Share of Search captures the genuine intention of the consumer through searches. This implies that an increase in this indicator not only reflects a rise in brand awareness but can also drive future sales, as consumers tend to seek information about a product before making a purchase.

The rise of AI-based search tools is transforming the way brand visibility is discovered and evaluated. This is relevant because, although changes in search engines may complicate the measurement of Share of Search, this KPI remains a tangible reflection of consumer interest.

Marketing specialists must closely monitor the Share of Search trends of their competitors to adjust strategies before they affect their market share. This includes optimizing related search terms and employing strategic advertising campaigns. Additionally, accurate measurement of Share of Search can provide valuable insights that will drive informed and proactive decision-making, before changes in consumer perception negatively impact sales figures.

Ultimately, tools like Google Trends and Semrush can facilitate the tracking of Share of Search, allowing brands to identify improvement opportunities and effectively capture consumer attention.