Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign

thehackernews.com Nov 12, 2026

Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign

Curated by Shubham · TechCapsules · Nov 12, 2026

AI-summarised brief · reviewed before publication

Since mid‑August 2026, a phishing campaign has been hijacking live Google Workspace sessions through seemingly innocuous Calendar invites. The attackers embed links that redirect through Google’s own /url redirector, then a Cloudflare Turnstile, and finally a dynamically generated password‑capture page that mirrors Google’s sign‑in interface. Victims enter credentials and two‑factor codes, which the attacker relays in real time, allowing session takeover without triggering standard defenses. Material Security’s Operation CloudFire has dismantled hundreds of domains, capturing over 99% of malicious messages with minimal false positives.

💡 Why It Matters

· The attack demonstrates that even trusted Google URLs can mask real‑time credential theft, exposing the limits of current email and authentication safeguards.
· It forces a reevaluation of how calendar invites are inspected and how multi‑factor authentication is monitored for anomalous real‑time use.

Capsules Google

Read full article on thehackernews.com

Google’s latest Search upgrade promises better answers to your most complicated questions

Google has launched Gemini 4 Hydrogen, a new AI model that enhances Search by quickly understanding complex, multi‑part questions, typos, and specific requests. Hydrogen is 2.5 times faster than the previous Gemini 3.8 Flash and outperforms Gemini 4 Argon on a broad intelligence benchmark. The update improves intent recognition, delivers richer visual responses, and supports multiple languages in AI Mode. It also offers four thinking levels and can operate independently or alongside other Gemini models for tasks like coding and research. The rollout is global.

💡 Faster, more accurate answers reduce the time users spend refining queries, reshaping how people interact with search engines for research and everyday tasks.

9to5google.com · Nov 12

Google announces Gemini 4 Hydrogen with ‘significant leaps’ in speed, intelligence

Google unveiled Gemini 4 Hydrogen, a major upgrade over Gemini 3.8 Flash, offering native 1‑million‑token input and output. The model scores 51 on the Artificial Analysis Intelligence Index at default high thinking and 54 at xhigh, outperforming peers in speed and accuracy. It excels at tone adherence, structured outputs, and tool usage, delivering ready‑to‑use drafts, tables, and visual breakdowns. Hydrogen powers AI Mode in Search, improving intent comprehension and visual responses, and is the default for AI Overviews. Developers pay $1.50 per million input tokens and $7.50 per million output tokens.

💡 Hydrogen’s enhanced speed and intelligence streamline complex workflows, enabling teams to ship projects faster while reducing token costs. Its superior intent handling reshapes how users interact with Google Search, making AI assistance more natural and efficient.

9to5google.com · Nov 12

Google rolling out Android 17 QPR3 Beta 4 for Pixel

Google began rolling out Android 17 QPR3 Beta 4 to supported Pixel hardware on Tuesday, following the stable release of QPR2 this year. The beta is available as an OTA for a range of devices, including the Pixel 6a, Pixel 7 series, Pixel 8 series, Pixel 9 series, Pixel 10 series, Pixel 11 series, the Pixel Tablet, Pixel Fold and the Pixel 8 Pro, as well as the Android Emulator. Users can enroll through the Android Beta Program and report problems via the Android Beta Feedback app, which links to Google’s internal issue tracker, or discuss bugs on the Reddit community. The update introduces the third quarterly platform refresh for Android 17, delivering incremental performance tweaks, API refinements and early access to upcoming features ahead of the final release.

💡 It gives developers immediate hands‑on experience with Android 17’s latest APIs on the newest Pixel models, speeding integration of forthcoming features.

9to5google.com · Nov 12

Google rolling out Gemini app for CarPlay

Google has launched the Gemini app on CarPlay, enabling iOS drivers to interact with Gemini Live while on the road. The interface features a waveform indicator that shows listening, thinking, and responding states, with “End” and “Mute” controls. Users can interrupt responses, pause, or add details, and conversations sync with the iPhone Gemini app, allowing continuity across devices. The rollout is global, supporting all Gemini Live languages, and requires the latest Gemini app update. The feature aims to serve as a conversational driving companion that reduces distraction.

💡 By extending Gemini to CarPlay, Google expands its AI ecosystem into a high‑stakes, safety‑critical environment, offering a unified conversational experience across Android and iOS platforms.

9to5google.com · Nov 12

Google Pixel Tag is only available in 8 countries, and excludes Europe

Google has launched its Pixel Tag, an Android Find Hub tracker, but sales are limited to only eight countries, excluding most of Europe. The tracker is available in the same markets as the Pixel 11 and Pixel Watch 5, yet its distribution remains far narrower. Users outside these regions cannot purchase the device through authorized retailers and will lack access to Google’s warranty. The company has not confirmed whether the Tag will function in unserved markets, though it may still operate. Google may broaden availability later.

💡 The restricted rollout underscores Google’s cautious approach to expanding its ecosystem, potentially limiting the adoption of its tracking technology in key global markets.

9to5google.com · Nov 12

You can now play Henry Cavill’s ‘Mustache Protocol’ game made on Googlebook…

Henry Cavill has released a 16‑bit retro video game titled “Mustache Protocol” on Googlebook, playable on desktop and mobile. The game features three levels, humorous power‑ups, and Easter eggs, and is themed around preventing rogue CGI artists from erasing mustaches worldwide. From November 11‑30, Google will donate $11 per play to Movember, up to $500,000, supporting men’s mental health, suicide prevention, prostate cancer, and testicular cancer. The launch coincides with a promotional push for Google’s new platform and holiday season marketing.

💡 The partnership turns casual gaming into a targeted fundraising tool, leveraging celebrity influence to raise significant awareness and funds for critical men’s health issues.