Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services

[nullpc]

Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services – Krebs on Security

Google says it recently fixed an authentication weakness that allowed crooks to circumvent the email verification required to create a Google Workspace account, and leverage that to impersonate a domain holder at third-party services that allow logins through Google’s “Sign in with Google” feature.

wtf google

 

[Futureized]

Glad I moved to zoho few years ago..
There crowdstrike outage also caused this issue -

https://www.forbes.com/sites/daveyw...asswords-vanish-for-15-million-windows-users/

 

[roadrash99]

Reading the headline I thought the Trump shooter was also a master hacker lol.

 

[nullpc]

Reading the headline I thought the Trump shooter was also a master hacker lol.

Thought the same when I first saw it on Hacker News lol.

Glad I moved to zoho few years ago..
There crowdstrike outage also caused this issue -

https://www.forbes.com/sites/daveyw...asswords-vanish-for-15-million-windows-users/

Woah WTF. Synced passwords also?

 

[Futureized]

Woah WTF. Synced passwords also?

IT was just an outage for 12+ hours, no information about leaks.
Storing passwords with any browsers (if sensitive) can be troubling, in fact any services too.