News

Microsoft Blocks Lebanon-Based Hackers Targeting Israel

The hackers were abusing Microsoft’s file hosting service, OneDrive, to target private and government organizations in Israel.

Published

4 years ago

June 7, 2022

David Morelo

microsoft blocks lebanon-based hackers targeting israel

Microsoft Threat Intelligence Center (MSTIC) has successfully identified and disabled an attack orchestrated by a Lebanon-based activity group called Polonium.

The group was abusing Microsoft’s file hosting service, OneDrive, to target private and government organizations in Israel. Based on its tools and techniques, it seems that Polonium is affiliated with Iran’s Ministry of Intelligence and Security (MOIS).

“Polonium has targeted or compromised more than 20 organizations based in Israel and one intergovernmental organization with operations in Lebanon over the past three months,” explains MSTIC.

The good news is that all legitimate OneDrive accounts are completely safe because the attack didn’t involve any security issues or vulnerabilities. Instead, Polonium used the file hosting service for command and control to execute part of their attack operation.

Polonium’s targets include primarily organizations in critical manufacturing, IT, and defense industry. “In at least one case, Polonium’s compromise of an IT company was used to target a downstream aviation company and law firm in a supply chain attack that relied on service provider credentials to gain access to the targeted networks.”

MSTIC is still actively investigating how Polonium gained initial access to many of their victims, but it knows that most victims were running Fortinet appliances. Based on this fact, MSTIC suspects that the CVE-2018-13379 vulnerability was used to gain access inside the targeted organizations.

Also Read: Is Your Phone Hacked? How To Find Out & Protect Yourself

While the threat has been contained, there are certain actions MSTIC recommends all organizations to take to protect themselves, such as confirming that Microsoft Defender Antivirus is updated, enabling multi-factor authentication (MFA), and blocking in-bound traffic from specific IP addresses.

This isn’t the first instance of threat actors using OneDrive and other similar file hosting services to achieve their nefarious goals. Last year, for example, Microsoft discovered that OneDrive was used to host malware files commonly used to launch Conti ransomware attacks.

News

At I/O 2026, Sundar Pichai Concedes AI Must Deliver Real Value

Gemini 3.5, a personal agent called Spark, agentic shopping, and Android XR eyewear are all aimed at making AI feel useful, not just impressive.

Published

2 weeks ago

May 20, 2026

Nour Nasir

at io 2026 sundar pichai concedes ai must deliver real value

Google

Google’s annual I/O developer conference (I/O 2026) has recently become a status update on the same question: can the company turn its AI spending into products people use every day? This year, chief executive Sundar Pichai described Google as being in a phase of hyper progress, while conceding this is the part of the cycle where people want to see real value in the products they use on a day-to-day basis.

The strategy on display was to push agents — AI systems that act on a user’s behalf — into nearly every Google product at once. Search now has an “intelligent search box” that returns generated explainer videos alongside links. Gmail, Docs, YouTube and Maps are gaining their own agent layers, including a Docs Live feature that turns spoken instructions into drafted text with citations.

Two new models, Gemini 3.5 and a cheaper Gemini 3.5 Flash, arrived the same day. Google says 900 million people now use Gemini, and that more than 50 billion images have been generated with it. The pricing tier names are likely to confuse buyers: a new AI Ultra plan launches at $100 a month, while the older Gemini AI Ultra drops from $250 to $200.

The flashier announcements were Gemini Omni, a video generator pitched as a more realistic answer to OpenAI’s discontinued Sora 2, and Gemini Spark, a personal agent that handles recurring tasks across a user’s Google account. A new universal shopping cart lets agents complete purchases across multiple retailers from inside Google itself, placing the company between the merchant and the buyer, and also owning the checkout.

Also Read: DJI Teases Dual-Camera Osmo Pocket 4P For 2026 Launch

Google also confirmed its Android XR eyewear, built with Samsung and frames from Warby Parker and Gentle Monster. Audio-only glasses ship this autumn; a display-equipped version, which would superimpose live translations into the wearer’s field of view, is still in development. Both sets translate, however only the display version shows you the result.

What Pichai did not resolve is the bargain underneath all this. An agent is only useful to the degree it knows your calendar, your inbox, your shopping history and your physical surroundings. Google has now confirmed that, in time, the same context may carry advertising.