{"id":1889,"date":"2023-06-05T19:39:45","date_gmt":"2023-06-05T14:09:45","guid":{"rendered":"https:\/\/bscrackers.com\/?p=1889"},"modified":"2023-06-05T19:39:45","modified_gmt":"2023-06-05T14:09:45","slug":"google-workspace-bug-allows-untraceable-data-theft-from-drive-files-report","status":"publish","type":"post","link":"https:\/\/bscrackers.com\/?p=1889","title":{"rendered":"Google Workspace Bug Allows Untraceable Data Theft From Drive Files: Report"},"content":{"rendered":"

[ad_1]
\n<\/p>\n

\n
\n
\"This<\/figure>\n

This flaw affects only users who do not have a paid enterprise license for Google Workspace.<\/p>\n<\/div>\n

\n

Users who do not have a paid Google Workspace licence have their private drive actions left undocumented.
\n
\n<\/h2>\n<\/div>\n<\/div>\n
\n
\n

Cybersecurity researchers have discovered a significant forensic security deficiency in Google Workspace that enables a hacker to exfiltrate data in Google Drive without any trace.<\/p>\n

According to researchers from Mitiga Security, once a malicious user inside has accessed the organisation\u2019s Google Drive, they can take action without being recorded at all.<\/p>\n

This flaw affects only users who do not have a paid enterprise licence for Google Workspace.<\/p>\n

Users who do not have a paid Google Workspace licence have their private drive actions left undocumented.<\/p>\n

Hackers can disable logging and recording by cancelling their paid licence and switching to the free \u201cCloud Identity Free” licence.<\/p>\n

This enables threat actors to exfiltrate files without leaving any trace, save for the indication that a paid licence was revoked, which is visible to administrators.<\/p>\n

\u201cA threat actor who gains access to an admin user can revoke the user\u2019s license, download all their private files, and reassign the license,” the researchers said.<\/p>\n

<\/p>\n

The experts also notified Google of its findings, who is yet to respond.<\/p>\n

Meanwhile, hackers are targeting iPhones with previously unknown malware, via iMessage to, gain complete control over the iOS device and spy on users.<\/p>\n

<\/p>\n

Cybersecurity company Kaspersky discovered the mobile Advanced Persistent Threat (APT) campaign targeting iOS devices with previously unknown malware.<\/p>\n

Dubbed as \u2018Operation Triangulation\u2019, the ongoing campaign distributes zero-click exploits via iMessage to run malware gaining complete control over the device and user data, with the final goal to \u201chiddenly spy on users”.<\/p>\n

(This story has not been edited by News18 staff and is published from a syndicated news agency feed – IANS<\/a>)<\/i> <\/div>\n

\n
\n
\n
\"\"\/<\/div>\n
Bharat Upadhyay<\/span><\/a><\/p>\n
Bharat Upadhyay, Senior Sub-Editor at News18 Tech, writes about technology and consumer gadgets. He has been covering the technology beat for over six…Read More<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

[ad_2]
\n
Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

[ad_1] This flaw affects only users who do not have a paid enterprise license for Google Workspace. Users who do not have a paid Google Workspace licence have their private drive actions left undocumented. Cybersecurity researchers have discovered a significant forensic security deficiency in Google Workspace that enables a hacker to exfiltrate data in … Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":1890,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[107],"tags":[],"class_list":["post-1889","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech"],"_links":{"self":[{"href":"https:\/\/bscrackers.com\/index.php?rest_route=\/wp\/v2\/posts\/1889","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bscrackers.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bscrackers.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bscrackers.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bscrackers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1889"}],"version-history":[{"count":0,"href":"https:\/\/bscrackers.com\/index.php?rest_route=\/wp\/v2\/posts\/1889\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bscrackers.com\/index.php?rest_route=\/wp\/v2\/media\/1890"}],"wp:attachment":[{"href":"https:\/\/bscrackers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1889"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bscrackers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1889"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bscrackers.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1889"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}