GhostToken GCP Bug Gives Entry To Attackers Into Google Accounts

Security experts have revealed information about a Google Cloud Platform (GCP) zero-day vulnerability that has since been patched that may have allowed threat actors to hide an irremovable, malicious application inside a victim’s Google account. The flaw, dubbed GhostToken by Israeli cybersecurity outfit Astrix Security, affects all Google accounts, including Workspace accounts geared at businesses. […]

This article has been indexed from Information Security Buzz

Read the original article: