google workspace Archives

Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails

16Jun

By RBNo Comments

News

Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails

For over a year, a China-affiliated espionage outfit surreptitiously stole confidential research and defense emails from North American medical, academic, and military research networks. A backdoor on their REDCap research servers was used to gain access and steal login information. The interesting portion was the exfiltration, where the attackers copied each communication that matched their keywords to an inbox they controlled by rewiring the victims' own Google Workspace policies. In a study released this week, Google's Threat Intelligence Group (GTIG) described the effort and highly confidently linked it to a cluster it monitors as UNC6508. Google initially mentioned the actor and its REDCap backdoor in a broader study on state-sponsored attacks on the defense industry in Febr...

Google Workspace rolls out multi-admin approval feature for risky changes

11Apr

By RBNo Comments

News

Google Workspace rolls out multi-admin approval feature for risky changes

A new Workspace feature from Google needs multiple administrators to approve changes to high-risk settings to avoid unauthorized or inadvertent changes that could compromise security. A comprehensive suite of cloud-based productivity and collaboration tools, Google Workspace (formerly G Suite) integrates services like Gmail, Google Drive, Google Docs, Sheets, Slides, Google Meet, and Google Calendar to provide a unified solution for individuals, businesses, and educational institutions. Google revealed plans to launch a new feature called multi-party approvals in August. This feature requires one admin to review and approve sensitive operations that another admin has started. According to Google, the mechanism for approving requests has been developed to minimize administrative w...

Design Flaw in Google Workspace Could Let Attackers Gain Unauthorized Access

29Nov

By RBNo Comments

News

Design Flaw in Google Workspace Could Let Attackers Gain Unauthorized Access

A "severe design flaw" in Google Workspace's domain-wide delegation (DWD) feature has been identified by cybersecurity researchers. This flaw could be used by threat actors to facilitate privilege escalation and gain unauthorized access to Workspace APIs without the need for super admin privileges. In a technical report shared with The Hacker News, cybersecurity firm Hunters stated that "such exploitation could result in theft of emails from Gmail, data exfiltration from Google Drive, or other unauthorized actions within Google Workspace APIs on all of the identities in the target domain." The design flaw, which is still active today, has been given the codename DeleFriend because it allows users to modify delegations that are already in place in Google Workspace read more Design Fl...

Hackers Could Exploit Google Workspace and Cloud Platform for Ransomware Attacks

17Nov

By RBNo Comments

News

Hackers Could Exploit Google Workspace and Cloud Platform for Ransomware Attacks

Threat actors may use a variety of newly demonstrated attack techniques against Google Workspace and the Google Cloud Platform to carry out ransomware, data exfiltration, and password recovery attacks. Martin Zugec, technical solutions director at Bitdefender, stated in a recent report that "threat actors could progress in several ways, starting from a single compromised machine: they could move to other cloned machines with GCPW installed, gain access to the cloud platform with custom permissions, or decrypt locally stored passwords to continue their attack beyond the Google ecosystem." In order for these attacks to occur, the malicious actor must have previously obtained access to a local computer through another method read more Hackers Could Exploit Google Workspace and Cloud Pl...

Google Workspace Adds Client-Side Encryption to Gmail and Calendar

2Mar

By RBNo Comments

News

Google Workspace Adds Client-Side Encryption to Gmail and Calendar

Client-side encryption (CSE) functionality has been added by Google to more Workspace products. Drive, Docs, Slides, Sheets, and Meet already have the security function. The business declared on Tuesday that Gmail and Calendar now support CSE. Ganesh Chilakapati, group product manager, and Andy Wen, director of product management at Google Workspace Security, wrote in a blog post, "We recognize sovereign controls are important to customers, and we have accelerated delivery of these encryption capabilities to support our customers in maintaining control over their data and meeting their regulatory compliance needs read more Google Workspace Adds Client Side Encryption to Gmail and Calendar. Stay informed with the best cybersecurity news and raise your cybersecurity awareness with our...