Business
Google Workspace bug allows untraceable data theft from Drive files
San Francisco, June 5
Cybersecurity researchers have discovered a significant forensic security deficiency in Google Workspace that enables a hacker to exfiltrate data in Google Drive without any trace.
According to researchers from Mitiga Security, once a malicious user inside has accessed the organisation's Google Drive, they can take action without being recorded at all.
This flaw affects only users who do not have a paid enterprise licence for Google Workspace.
Users who do not have a paid Google Workspace licence have their private drive actions left undocumented.
Hackers can disable logging and recording by cancelling their paid licence and switching to the free "Cloud Identity Free" licence.
This enables threat actors to exfiltrate files without leaving any trace, save for the indication that a paid licence was revoked, which is visible to administrators.
"A threat actor who gains access to an admin user can revoke the user's license, download all their private files, and reassign the license," the researchers said.
The experts also notified Google of its findings, who is yet to respond.
Meanwhile, hackers are targeting iPhones with previously unknown malware, via iMessage to, gain complete control over the iOS device and spy on users.
Cybersecurity company Kaspersky discovered the mobile Advanced Persistent Threat (APT) campaign targeting iOS devices with previously unknown malware.
Dubbed as 'Operation Triangulation', the ongoing campaign distributes zero-click exploits via iMessage to run malware gaining complete control over the device and user data, with the final goal to "hiddenly spy on users".
48 minutes ago
Delhi Committee of Chicago Sister Cities international, ComEd and Navy Pier host Annual “Global Connections: Holi” celebration
51 minutes ago
New Citizens Will Be Able to Seamlessly Request Social Security Updates
1 hour ago
EAM Jaishankar says talks with Ukrainian FM focused on conflict with Russia
1 hour ago
Bangladeshi teen in ‘mental crisis’ shot dead by New York police
1 hour ago
Over 1.1 mn people in Gaza facing food insecurity: UN
1 hour ago
Palestinian death toll in Gaza Strip rises to 32,552: Ministry
1 hour ago
Kangana Ranaut holds roadshow in Mandi, responds to Supriya Shrinate’s ‘bhao’ jibe
1 hour ago
CPI tries to revive itself by launching ex-IPS officer in UP’s Faizabad
1 hour ago
INDIA bloc's seat-sharing formula for Bihar announced
1 hour ago
Royal scion Yaduveer Wadiyar’s candidature puts Congress on the backfoot
1 hour ago
Aged Kerala parents still wait for son who left for Australia seven years ago
1 hour ago
ED to approach Bengal court for permission to question Sheikh Shahjahan
1 hour ago
Prez Murmu, J&K L-G express grief over loss of lives in highway accident