Google to pay up to $1.5 million for zero-click Pixel Titan M exploits
2026-05-05T14:51:51Z•fa7702fd110e6226c57c96ffba0b4c2409b11d1c3a610838abb9062e49a17b99
account-takeoverai-workloadsapt37awsbug-bountycis-hardened-imagesconticyberfloodencrypted-backupsgoogle-vrphsmmetamicrosoft-defenderoracle-cspupatchingphishingpixelransomwarescarcruftsupply-chaintitan-m2trojanviavizero-click
What happened
This feed covers multiple security developments: Google raised top bounties to $1.5M for zero-click, full-chain Pixel exploits (targeting Titan M2) and adjusted rewards to prioritize researcher-driven, hard-to-automate findings. Microsoft disclosed a large phishing campaign using fake compliance notices that targeted >35,000 users across 13,000 organizations to harvest credentials and enable account takeovers. ESET linked a long-running supply-chain/backdoor operation on a Korea-focused gaming platform to ScarCruft (APT37), used to spy on ethnic Koreans in China. Oracle will begin monthly CSPU
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- fa7702fd110e6226c57c96ffba0b4c2409b11d1c3a610838abb9062e49a17b99
- Enrichment time
- 2026-05-05T14:51:51Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.