[ThreatPost]Convenient Google WebLogin Tokens Can Expose User Accounts, Data

[igor51]

Convenient Google WebLogin Tokens Can Expose User Accounts, Data

A researcher demonstrated an exposure in the Google ecosystem that allows an attacker to steal a WebLogin single sign-on token to access all of the Google services a user has configured.
Source: Convenient Google WebLogin Tokens Can Expose User Accounts, Data