WhatsApp, Slack Notifications Could Hijack Google Gemini on Android
2026-06-04T01:24:19Z•599e6185a5f4c34e3dc36c2a194deecc621b7d15b93a0fc3194a3058cbf0a4dd
androiddebug-flagdesckvb-ratdoubleclickgithubgithub.devgoogle-geminiinstagrammalspammessengermicrosoft-365notification-hijackntlmv2oauth-tokenrceredissignalslacksmstoken-thefturi-handler','http2-bomb','nginx','apache','iis','envoy','cloudfvoice-assistantvs-codewhatsappwindows
What happened
A broad set of active threats and high-impact vulnerabilities were reported: a poisoned notification attack could hijack Google Gemini voice assistant on Android; malspam abusing Google's DoubleClick is delivering the DesckVB RAT; a leftover debug flag in Microsoft 365 Android apps allows arbitrary apps to obtain account tokens; Redis has a newly patched authenticated RCE (CVE-2026-23479); a one-click GitHub.dev/VS Code attack can steal full GitHub OAuth tokens; a new HTTP/2 “bomb” enables remote DoS across major web servers; multiple supply-chain incidents (Miasma targeting Red Hat npm, codex
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 599e6185a5f4c34e3dc36c2a194deecc621b7d15b93a0fc3194a3058cbf0a4dd
- Enrichment time
- 2026-06-04T01:24:19Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.