Ghosttoken – Zero-Day Flaw Lets Attackers Gain Access to Google Accounts

Astrix’s Security Research Group reported a 0-day flow in the Google Cloud Platform (GCP) related to an OAuth flow exploitation. This method was termed “Ghosttoken.”  Exploiting this flaw is done through a malicious application, which can lead threat actors to gain access to the victim’s Google account forever. One of the most important and scary […]

The post Ghosttoken – Zero-Day Flaw Lets Attackers Gain Access to Google Accounts appeared first on Cyber Security News.

access account accounts application attackers cloud cloud platform cyber cyber security exploitation exploiting flaw flow gcp google google account google accounts google cloud google cloud platform important malicious malicious application oauth platform research scary security security research threat threat actors victim vulnerability zero-day zero-day flaw