Xentric Solutions

This is a good example of how brand-new features can increase business risk, even when they’re launched with good intentions 😬

Google recently rolled out a feature that lets people change their Gmail address while keeping the original address as an alias.

All emails still arrive in the same inbox, so there’s no disruption to contacts or history 📧

On paper, it’s a sensible convenience upgrade.

In practice, attackers moved fast.

Security researchers are now warning about phishing emails that claim to relate to a Gmail address change or a required security check.

These messages look especially convincing because they’re sent through Google’s own systems and appear to come from genuine Google addresses.

For a busy employee, everything checks out at first glance.

The emails reference security activity, ask for confirmation, and include links that appear to lead to official Google support pages.

The problem is where those links really go.

Instead of Google, they land on fake login pages designed to harvest passwords.

Even more concerning, many of these pages are hosted on sites.google.com, which is a legitimate Google website builder.

Because it’s a real Google domain, many email security tools don’t block it.

And because it looks familiar, people don’t question it.

If someone enters their password, the impact can go far beyond email 😰

A compromised Google account can expose Drive files, calendars, shared documents, and any third-party services that use “Sign in with Google”.

In a business context, that can quickly turn into data exposure, account takeover, and a messy incident to clean up.

What’s also worth noting is that this isn’t entirely new.

Research flagged early waves of similar attacks in late 2025, before this feature was even widely known.

Google has said its systems weren’t breached, but this shows how easily legitimate platforms can be abused without being compromised.

There are still warning signs, if people slow down:

• Generic greetings instead of names
• Urgent language designed to create panic
• Any request to enter passwords via an email link

Google’s advice is straightforward: Don’t click 🙅

Go directly to your account in a browser and check security alerts there instead.

Add multi-factor authentication, use strong unique passwords, and assume unexpected security emails deserve scrutiny.

The bigger takeaway for businesses is this: Every new convenience feature also creates a new social-engineering opportunity.

And attackers are very good at finding the gap between “this looks normal” and “this is dangerous”.

💭 If one convincing email can bypass both filters and instincts, how confident are you that your people would pause before handing over access to your business?

There’s an assumption that keeps popping up in AI conversations, and this research breaks it…

The idea is that younger workers are relaxed about AI, while older workers feel threatened by it.

New research suggests the opposite 😮

Gen Z workers, despite being some of the strongest users of AI tools, are the most concerned about AI displacing human roles.

Meanwhile, Boomers report feeling more confident about adapting to new workplace trends, including AI-driven change.

That contrast is telling.

Across the workforce, most people now expect AI to affect their day-to-day tasks in some way.

But almost half believe the biggest benefits will flow to employers rather than employees.

And while a portion of workers still feel their role is safe, the pace of change suggests that confidence may not last forever.

What really stands out is the response to that uncertainty.

Most people agree they need to upskill to keep pace, yet there’s no clear consensus on who owns that responsibility.

Many aren’t waiting to find out.

Around half have already taken learning into their own hands, rather than relying on structured support from their employer.

At the same time, the jobs market is shifting fast.

Demand for roles involving AI agents, prompt writing, and AI training has grown dramatically.

New skills are emerging almost faster than organizations can define them.

And yet, despite all the focus on technology, something very human keeps showing up in the data.

People still learn soft skills, judgment, communication, and resilience from more experienced colleagues.

They still learn new tech and AI skills from younger ones.

And managers are playing an increasingly important role in helping teams feel grounded while everything else changes.

AI may be reshaping tasks, tools, and titles, but adaptation is an emotional challenge as well as a technical one.

👉 If some of the most capable AI users are also the most anxious about the future, what does that say about how clearly we’re explaining the path forward?

Your phone’s browser is building a picture of you over time.

Where you go. What you look up. Patterns that reveal far more than most people expect.

That doesn’t make popular browsers bad.
But it does mean they deserve more attention than they usually get…
Give it some attention with the link in the comments.