On April 7, Google patched the GhostToken GCP vulnerability that could have allowed attackers to backdoor Google accounts using malicious OAuth applications (Sergiu Gatlan/BleepingComputer)

Sergiu Gatlan / BleepingComputer:
On April 7, Google patched the GhostToken GCP vulnerability that could have allowed attackers to backdoor Google accounts using malicious OAuth applications  —  Google has addressed a Cloud Platform (GCP) security vulnerability impacting all users and allowing attackers to backdoor …

from Techmeme https://ift.tt/DoZ2I17
via IFTTT