Pictured: Google and parent company Alphabet's corporate headquarters. Researchers recently reported finding security holes in Google's G Suite and Google Drive offerings. (Alex Tai/SOPA Images/LightRocket via Getty Images)

Google has mitigated a validation flaw in its G Suite and Gmail offerings that could allow malicious emails to bypass even the strictest of SPF and DMARC protections, but the company has not fixed another validation vulnerability in Google Drive that could result in users downloading malware.

Discovered by researcher Allison Husain last April 1, the G Suite/Gmail flaw was found to be the result of a missing verification process during the configuration of mail routes.

Please register to continue.

Already registered? Log in.

Create Free Account Log in to Existing Account

Once you register, you'll receive:

  • News analysis

    The context and insight you need to stay abreast of the most important developments in cybersecurity. CISO and practitioner perspectives; strategy and tactics; solutions and innovation; policy and regulation.

  • Archives

    Unlimited access to nearly 20 years of SC Media industry analysis and news-you-can-use.

  • Daily Newswire

    SC Media’s essential morning briefing for cybersecurity professionals.

  • Learning Express

    One-click access to our extensive program of virtual events, with convenient calendar reminders and ability to earn CISSP credits.

Topics:

Cloud Security Email Security Vulnerabilities