- HX Weekly by Hexagon Center
- Posts
- Google Photos upgrades may affect you
Google Photos upgrades may affect you
The 118th edition of HX Weekly highlights the deep integration of Gemini AI into Google Photos, urging users to review permissions to maintain data privacy. This edition also covers critical security alerts, including Apple account notification scams and help desk impersonation attacks on Microsoft Teams used to deploy malware. With additional reports on "ghost breaches," vulnerability flaws in healthcare systems, and a breach at ADT, the newsletter emphasizes a heightened need for vigilance across the "Internet of Things."
Daniel Masterson, Ai Courtrie Buson & Bard Gee
April 24, 2026
HX Weekly
by Hexagon Center
for the week of April 19, 2026, 118th edition
Your quick weekend update and reminder.
☝️ TWA
The article by Zak Doffman discusses a major update to Google Photos that integrates Google's Gemini AI more deeply into your personal media library. |
🤷♀️ What now?: If you value privacy over convenience, carefully review the permissions when the app asks to enable "Ask Photos" or "Gemini extensions," as these are the gateways that allow the AI to start scanning your library.
Tools: Use a different service or review permission (see above)
WATCH OUT ◉_◉ Hackers are abusing Apple account notifications to distribute malware, steal money and data
📰 Security Highlights
Tinder and Zoom offer 'proof of humanity' eye-scans to combat AI
Serial-to-IP Converter Flaws Expose OT and Healthcare Systems to Hacking
Microsoft: Teams increasingly abused in helpdesk impersonation attacks
UNC6692 Impersonates IT Help Desk via Microsoft Teams to Deploy SNOW Malware
Trigona ransomware attacks use custom exfiltration tool to steal data
Over 1,300 Microsoft SharePoint servers vulnerable to spoofing attacks
Lots of AI in the news this week but the one most concerning development is data privacy. From Google to the government, it seems to give us a warning to be more vigilant not just in our privacy settings, but also in our everyday life. That’s why they call it — the Internet of Things.
The one thing that is still the most exciting thing going on in Hexagon Center is the videos we are producing. They are currently only on YouTube but you may share them anywhere you go. Can you guess the iconic reference it is styling its message after? (Hint: It’s in the hashtag after the title of the video.)
HOUSEKEEPING
Glossary/Legend:
Zero Trust - a strategic cybersecurity framework based on the principle of "never trust, always verify," requiring strict identity authentication and authorization for every user and device, whether inside or outside the network perimeter. It assumes breach, removes implicit trust, and employs granular, least-privilege access controls to protect resources.
Holistic security - a comprehensive strategy that integrates various protection layers—physical, digital, psycho-social, and organizational—to safeguard individuals, communities, or systems, recognizing that true security involves overall well-being, not just isolated technical defenses.
Personal Identifier - A unique word or phrase shared exclusively with an individual or a group, serving as a means of identification and affirmation within the established relationship. It is recommended that 2 or more Personal Identifiers be established per person.
Malware (short for malicious software) - refers to any intrusive software developed by cybercriminals (often called hackers) to steal data and damage or destroy computers and computer systems.
Ransomware - A type of malware that locks or encrypts a victim's files and demands a ransom payment to unlock and decrypt them. Ransomware can infect a variety of devices, including computers, smartphones, printers, and more.
Privacy Notice: HX Weekly and the Hexagon Center are committed to your digital security. We do not collect, track, or store any personal information from our subscribers beyond the email address provided for delivery.
Spread cybersecurity culture
Do you have any suggestions on how we can further share this newsletter? Tell your friends and family about us by sharing with them the Hexagon Center official website:
View archives at hxweekly.beehiiv.com
Even though we aim to provide you the most current and critical information to keep you safe, threat actors work 24/7 and this newsletter publishes only once a week. Even though we are available via a hotline, it is crucial that you stay up to date via other sources as well to be informed on how you may be at risk.
You may reply to this newsletter or email us at
[email protected]
Send us any questions or things you want to talk about. Please share some fun facts with us. We welcome feedback and suggestions.
Hexagon Center is formed as a nonprofit corporation in California for public benefit,
and is tax-exempt under section 501(c)(3) of the Internal Revenue Code.
DISCLAIMER
Cybersecurity is an ever-changing field, and threats may evolve. While Hexagon Center strives to provide accurate and timely information, we cannot guarantee absolute security. Users are responsible for implementing their security measures and staying informed about the latest cybersecurity developments. Hexagon Center is not responsible for any cyber or scam attacks by our readers. HX Weekly tips are advice are not official positions of Hexagon Center nor is Hexagon Center responsible for its content.
Content of this newsletter is not an official representation of Hexagon Center.
Reply