Google has mitigated a validation flaw in its G Suite and Gmail offerings that could allow malicious emails to bypass even the strictest of SPF and DMARC protections, but the company has not fixed another validation vulnerability in Google Drive that could result in users downloading malware.
Discovered by researcher Allison Husain last April 1, the G Suite/Gmail flaw was found to be the result of a missing verification process during the configuration of mail routes.
Please register to continue.
Already registered? Log in.
Once you register, you'll receive:
The context and insight you need to stay abreast of the most important developments in cybersecurity. CISO and practitioner perspectives; strategy and tactics; solutions and innovation; policy and regulation.
Unlimited access to nearly 20 years of SC Media industry analysis and news-you-can-use.
SC Media’s essential morning briefing for cybersecurity professionals.
One-click access to our extensive program of virtual events, with convenient calendar reminders and ability to earn CISSP credits.