GhostToken GCP flaw let attackers backdoor Google accounts

Google has addressed a Cloud Platform (GCP) security vulnerability impacting all users and allowing attackers to backdoor their accounts using malicious OAuth applications installed from the Google Marketplace or third-party providers. [...]

accounts applications attackers backdoor cloud cloud platform flaw gcp google google accounts malicious malicious oauth applications marketplace oauth party platform security security vulnerability third third-party vulnerability