Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le juillet 27, 2024, 00:02:57

Titre: [kreb]Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services
Posté par: igor51 le juillet 27, 2024, 00:02:57

Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services

Google says it recently fixed an authentication weakness that allowed crooks to circumvent email verification needed to create a Google Workspace account, and leverage that to impersonate a domain holder to third-party services that allow logins through Google's "Sign in with Google" feature.
Source: Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services (https://krebsonsecurity.com/2024/07/crooks-bypassed-googles-email-verification-to-create-workspace-accounts-access-3rd-party-services/)