[Sophos]Google patches bug that allows attackers to slip past two-factor authentication

[igor51]

Google patches bug that allows attackers to slip past two-factor authentication

Attackers could - until Google issued a fix  last Thursday, that is - bypass Google accounts' two-step login verification, reset a user's master password, and gain full profile control, just by capturing a user's application-specific password.
Source: Google patches bug that allows attackers to slip past two-factor authentication