NEWS  Security  January 3, 2024  Reading time: ~1 minute)

A clandestine vulnerability has surfaced – the exploitation of an undocumented Google OAuth endpoint named MultiLogin. Threat actors, spearheaded by the revelation of PRISMA on October 20, 2023, have actively employed this exploit to perpetrate information-stealing malware, allowing persistent access to Google services even after password resets. Read more