Business
Google Workspace bug allows untraceable data theft from Drive files

San Francisco, June 5
Cybersecurity researchers have discovered a significant forensic security deficiency in Google Workspace that enables a hacker to exfiltrate data in Google Drive without any trace.
According to researchers from Mitiga Security, once a malicious user inside has accessed the organisation's Google Drive, they can take action without being recorded at all.
This flaw affects only users who do not have a paid enterprise licence for Google Workspace.
Users who do not have a paid Google Workspace licence have their private drive actions left undocumented.
Hackers can disable logging and recording by cancelling their paid licence and switching to the free "Cloud Identity Free" licence.
This enables threat actors to exfiltrate files without leaving any trace, save for the indication that a paid licence was revoked, which is visible to administrators.
"A threat actor who gains access to an admin user can revoke the user's license, download all their private files, and reassign the license," the researchers said.
The experts also notified Google of its findings, who is yet to respond.
Meanwhile, hackers are targeting iPhones with previously unknown malware, via iMessage to, gain complete control over the iOS device and spy on users.
Cybersecurity company Kaspersky discovered the mobile Advanced Persistent Threat (APT) campaign targeting iOS devices with previously unknown malware.
Dubbed as 'Operation Triangulation', the ongoing campaign distributes zero-click exploits via iMessage to run malware gaining complete control over the device and user data, with the final goal to "hiddenly spy on users".

5 hours ago
Celebrating Asian Heritage Month: Bharatanatyam Finds a Place on the Canadian Cultural Stage.

5 hours ago
ALSAC announces Ike Anand as President and Chief Executive Officer, ushering in a new era of innovation and growth

8 hours ago
Ramaswamy targets 'radical' Mamdani, 'invites' NYC people to move Ohio

9 hours ago
'Fueling Putin's war machine': US Senators say penalise India, China, Brazil with 500% tarriff to deter trade with Russia

9 hours ago
Trump's Ultimatum: Russia must make peace with Ukraine in 50 days or face 100% tariff

11 hours ago
Nimisha Priya case: Last-minute negotiations bring big relief to Kerala nurse in Yemen, execution deferred

11 hours ago
Punjab Assembly pays tributes to Fauja Singh

11 hours ago
Makers of Sai Pallavi's 'Gargi' celebrate as film completes three years of its release

12 hours ago
Tillotama Shome to star in Shweta Tripathi’s maiden production 'Mujhe Jaan Na Kaho Meri Jaan'

12 hours ago
Jessica Alba focused on herself, kids and not interested in a relationship right now

12 hours ago
'Heer Express' trailer promises a complete family drama with a tadka of emotions

12 hours ago
Randeep Hooda on 25 years ‘Operation Khukri’: Proud moment for all us Indians

12 hours ago
Viineet Kumar Siingh, Rajshri Deshpande-starrer ‘Rangeen’ to stream from July 25