Google’s effort to keep malware off Blogger briefly ended up locking out legitimate publishers instead.

Beginning Tuesday, August 4, hundreds of Blogger sites were flagged under the platform’s Malware and Similar Malicious Content policy. The incident resulted in blogs being locked, hidden from public view, or deleted despite showing no evidence of malware infection.

For online platforms, the incident is a reminder that their ability to reach their audience ultimately depends on systems they neither control nor fully understand. When those systems make mistakes, even temporarily, the consequences can be catastrophic.

False malware alerts lock Blogger sites

Several Blogger site owners reported enforcement actions that left some publishers unable to access their sites. Others reported that their sites had disappeared from public view or been deleted.

According to BleepingComputer, Google is aware of the incident, but has not released an official figure for the number of affected blogs. However, the outlet says the incident affected hundreds of sites running Google Blogger.

As of the time of writing, Google’s own Blogger support forum has attracted far more than 500 “I have the same question” responses, suggesting the disruption extended well beyond a handful of isolated cases.

Restoration in progress

A Google Product Expert said Google’s team is working to restore blogs that were incorrectly flagged. The expert reiterated that the alerts stemmed from false positives rather than actual malware infections, while some affected users later reported that access to their blogs had already been restored.

The Product Expert also suggested the disruption was unusual in scale. While false positives occasionally occur on Blogger, the expert noted they had not previously seen them affect so many blogs at once, reflecting the widespread nature of the incident discussed across the support forum.

For affected publishers, the Product Expert recommended using Blogger’s Request Review option. Blogs that have been flagged will not be able to access blog management features until they are restored.

Users whose blogs remain deleted can also monitor the official Blogger Help Community for updates as the rollout continues.

Must-read security coverage

Why this matters for online platforms

Google has not disclosed what triggered the false positive detections.

However, the incident echoes a growing number of cases in which buggy security and safety systems have mistakenly flagged legitimate content or software. Although the underlying causes might differ, they illustrate how a single incorrect detection can quickly become a user-facing incident rather than remaining an internal security event.

As automated enforcement becomes more deeply integrated into products and services, companies are increasingly judged by how quickly they identify false positives, communicate with affected users, and restore normal service when mistakes occur.

For publishers and businesses, the takeaway isn’t simply that false positives exist. It’s that operational continuity can no longer be taken for granted.

Incidents like this reinforce the value of maintaining alternative publishing or communication channels and preparing for unexpected platform disruptions, regardless of whether they stem from cyberattacks, technical failures, or erroneous enforcement decisions.

Also read: CrowdStrike warns that AI adoption, cloud attacks, and malicious software packages are creating underdefended attack surfaces that security teams must monitor.

Cloudflare is the latest company to join the race to build a new web browser. But instead of pitching a Chrome alternative to consumers, the internet infrastructure provider launched Kitesurf, a cloud-hosted browser designed specifically for AI agents.

AI software is evolving from chatbots that answer questions to agents that can complete tasks on users’ behalf. Browsers are a critical part of this transition, as they’ll need to navigate the web and use websites, as humans do.

Unlike traditional web browsers built for humans, a browser built for AI agents doesn’t care about visual elements, like themes, tabs, or browser extensions, Cloudflare explained in its announcement. A browser designed for AI agents needs to manage context windows, performance, token costs, and scalability. It also faces a different threat model because an AI browser could be subject to vulnerabilities like prompt injection attacks and more, the company noted.

With Kitesurf, AI developers will be able to build software that can navigate websites, fill out forms, and complete other browser-based tasks, without having to build their own browser software.

Cloudflare says it decided to build Kitesurf just 12 weeks ago, and it runs entirely on top of the company’s serverless platform, called Workers. Kitesurf is available for free while in beta in Browser Run, which lets developers programmatically control and interact with headless browser instances on Cloudflare’s network.

For developers, Cloudflare’s pitch is that this enables AI agents to use the web more efficiently while using less computing power than Chromium, which keeps costs down.

“Kitesurf is significantly more efficient in CPU and memory consumption than Chromium for common agentic tasks like screenshots and HTML extraction,” according to the company.

The browser itself was built from other technologies, including a modular rendering engine from Blitz; Firefox’s CSS parser, Stylo; and Boa JS, a Rust ECMAScript engine. Everything else runs inside Cloudflare Workers. Although still new, Cloudflare says Kitesurf already passes around 215,000+ web platform tests, and it’s adding hundreds more passing tests every week.

Cloudflare also credited the open-source Rust headless engine, Obscura, for inspiring it to develop Kitesurf, noting that the first proof of concept was a port of Obscura to Workers.

The company said the browser correctly renders pages like TodoMVC, a popular benchmark application for comparing JavaScript frameworks, along with Wikipedia, Hacker News, the Cloudflare Blog, and much of the Cloudflare dashboard.

Framework, a company that makes modular repairable computers, said it has notified all of its customers that hackers stole their names, email addresses, phone numbers, and physical addresses, due to an incident at a company that provides business intelligence.

On Thursday, several Framework customers said on social media that they had received an email from the company notifying them of the data breach.

Framework’s spokesperson Eric Schumacher told TechCrunch that the breach affected “all customers,” but declined to specify a specific number. Framework computers are relatively niche products, but some estimates say the company sold hundreds of thousands of devices. 

According to the notification seen by TechCrunch, the company blamed the data breach on an upstream cyberattack at Metabase.

Metabase disclosed its own breach in a blog post on its official website, where it said that it was hacked by someone using an unknown security flaw, a so-called zero-day. The company said the hackers exploited the bug to give them the ability to access customers’ databases stored on Metabase’ cloud servers.

In its email to customers, Framework also included the email Metabase sent to the company, which says hackers accessed Framework’s cloud instance. The computer maker said it investigated the incident and found that hackers had stolen its customers’ personal data, but did not include their payment information.

Metabase did not respond to a request for comment.