[Krebs on Security] Crooks Bypassed Google's Email Verification to Create Workspace Accounts, Access 3rd-Party Services

Krebs on Security has posted a new item. Google says it recently fixed an authentication weakness that allowed crooks to circumvent email verification needed to create a Google Workspace account, and leverage that to impersonate a domain holder to third-party services that allow logins through Google's "Sign in with Google" feature. Please use the link above to continue reading this posting. * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * Are you ready to get the most from AWS Service Control Policies? Dive into the Ultimate Guide to SCPs! Learn how they work, where they don’t work and how to leverage them to protect the most powerful permissions in your cloud. This guide from Sonrai Security offers: - 5 Key Use Cases: Master SCPs for everything from enforcing encryption to preventing perimeter breaches. - 5 Practical Tips: Optimize your SCP strategies, including how to hack the 5 SCPs per org limit. - 5 SCPs to Implement Today: Get ready-to-use policies for enhancing cloud security. Perfect for cloud security professionals in AWS! Download the guide now and get the most out of SCPs! Download SCP Guide Now: * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * You received this e-mail because you asked to be notified when new updates are posted. Best regards, BrianKrebs P.S. You may manage your subscription here: