Business
Google Workspace bug allows untraceable data theft from Drive files

San Francisco, June 5
Cybersecurity researchers have discovered a significant forensic security deficiency in Google Workspace that enables a hacker to exfiltrate data in Google Drive without any trace.
According to researchers from Mitiga Security, once a malicious user inside has accessed the organisation's Google Drive, they can take action without being recorded at all.
This flaw affects only users who do not have a paid enterprise licence for Google Workspace.
Users who do not have a paid Google Workspace licence have their private drive actions left undocumented.
Hackers can disable logging and recording by cancelling their paid licence and switching to the free "Cloud Identity Free" licence.
This enables threat actors to exfiltrate files without leaving any trace, save for the indication that a paid licence was revoked, which is visible to administrators.
"A threat actor who gains access to an admin user can revoke the user's license, download all their private files, and reassign the license," the researchers said.
The experts also notified Google of its findings, who is yet to respond.
Meanwhile, hackers are targeting iPhones with previously unknown malware, via iMessage to, gain complete control over the iOS device and spy on users.
Cybersecurity company Kaspersky discovered the mobile Advanced Persistent Threat (APT) campaign targeting iOS devices with previously unknown malware.
Dubbed as 'Operation Triangulation', the ongoing campaign distributes zero-click exploits via iMessage to run malware gaining complete control over the device and user data, with the final goal to "hiddenly spy on users".

24 minutes ago
Ananya Panday: I’ve grown into a version of myself who’s not afraid to try

25 minutes ago
Grateful for the love, say makers of Mahesh Babu's 'Maharishi' as film completes six years!

26 minutes ago
Actress Aishwarya Raj recounts her firsthand experience of witnessing a drone attack in Jaisalmer

26 minutes ago
Arvind Swami opens up about playing Major Srinivasan in ‘Tanvi The Great’

27 minutes ago
Mohanlal’s son Pranav’s horror film christened as ‘Dies Irae’

28 minutes ago
Audio launch of Mani Ratnam's Thug Life postponed; Kamal says, 'Art can wait, India comes first.'

38 minutes ago
Pak propaganda alert: Sukhoi shot down, pilot captured; PIB says 2014 image of crash

39 minutes ago
Security tightened at Tirumala temple in view of rising India-Pak tensions

39 minutes ago
Defence Minister reviews 'Operation Sindoor', ongoing situation with military chiefs

40 minutes ago
Karnataka: Medical student booked for 'pro-Pakistan' post on social media

40 minutes ago
Seven Gujarat airports closed to civil flights amid rising tensions

41 minutes ago
High alert in Rajasthan: Leaves of police, medical staff cancelled; blackouts in border areas

1 hour ago
India-Pak tension: Kerala opens control rooms for Malayalees