Google Workspace Glitch: Hackers Had a Field Day with Email Verification Flaw
Google Workspace had a glaring vulnerability allowing hackers to bypass email verification and impersonate users. Crooks exploited this flaw to sign into third-party services using “Sign in with Google.” Google fixed the issue within 72 hours, but some users claim the problem persisted for months.
Hot Take:
Well, it looks like Google’s “Sign in with Google” feature was more like “Sign in with Gullible” for a hot minute there. If only hackers could put their creativity into something more productive, like making a better cat meme generator!
Key Points:
- Google Workspace had a vulnerability in its email verification process.
- Hackers exploited this to access third-party services using “Sign in with Google”.
- The flaw allowed the use of one email to sign in and another to verify the token.
- Google claims to have fixed the issue within 72 hours of discovering it.
- Reports suggest the flaw might have been exploited for up to two months.
Already a member? Log in here