Sunday, November 24, 2024
HomeCyber Security NewsGoogle Announced Google+ Shut down, Following Security Breach That Exposed 500,000 Users...

Google Announced Google+ Shut down, Following Security Breach That Exposed 500,000 Users Accounts

Published on

Google announced Google+ shut down following the security breach that exposed 500,000 Google+ accounts.

The bug allows third-party developers to access user’s name, email address, occupation, gender, and age. According to WSJ Google discovered the bug in March 2018 and they did not disclose the bug.

Google+ Shut down

In a blog post the tech giant said we are storing API log data only for two weeks, so we are unable to confirm which users were impacted by this bug.

- Advertisement - SIEM as a Service

However, we have run a detailed analysis based on the API before patching, according to the analysis report more than 500,000 Google+ accounts were impacted and 438 applications used the API.

The company said We have no evidence that any developer was aware of this bug or abusing the API, and we found no evidence that any Profile data was misused.

Google has not revealed any technical details about the vulnerability, the vulnerability appears to be from open from 2015 and it was discovered and fixed by Google in March 2018.

Granular Google Account Permissions

Google announced granular account permissions that shows users more details of what account selected to share with the app.

Instead of seeing all requested permissions in a single screen, apps will have to show you each requested permission, one at a time, within its own dialog box.

Google+ Shut down

Google also to update their User Data Policy for the consumer Gmail API to limit the apps that seeking permission to access your consumer Gmail data and to limit the Google Play to limit which apps are allowed to access a user’s phone and SMS data.

“In the coming months, we’ll roll out additional controls and update policies across more of our APIs. As we do so, we’ll work with our developer partners to give them appropriate time to adjust and update their apps and services.”

The consumer version of Google+ will be fully shut down in the next 10 months, the consumer version of Google+ launched in 2011 and it has not achieved a broad consumer or developer adoption and has only a limited user interaction.

Google says “the consumer version of Google+ currently has low usage and engagement: 90 percent of Google+ user sessions are less than five seconds.”

Related Read

Hackers Exploited Facebook Zero-Day Flaw & Stolen 50 Million Accounts Access Tokens

Hackers Selling Facebook Account Logins Details On Dark Web For $3

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Nearest Neighbor Attacks: Russian APT Hack The Target By Exploiting Nearby Wi-Fi Networks

Recent research has revealed that a Russian advanced persistent threat (APT) group, tracked as...

240+ Domains Used By PhaaS Platform ONNX Seized by Microsoft

Microsoft's Digital Crimes Unit (DCU) has disrupted a significant phishing-as-a-service (PhaaS) operation run by...

Russian TAG-110 Hacked 60+ Users With HTML Loaded & Python Backdoor

The Russian threat group TAG-110, linked to BlueDelta (APT28), is actively targeting organizations in...

Earth Kasha Upgraded Their Arsenal With New Tactics To Attack Organizations

Earth Kasha, a threat actor linked to APT10, has expanded its targeting scope to...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

Nearest Neighbor Attacks: Russian APT Hack The Target By Exploiting Nearby Wi-Fi Networks

Recent research has revealed that a Russian advanced persistent threat (APT) group, tracked as...

240+ Domains Used By PhaaS Platform ONNX Seized by Microsoft

Microsoft's Digital Crimes Unit (DCU) has disrupted a significant phishing-as-a-service (PhaaS) operation run by...

Russian TAG-110 Hacked 60+ Users With HTML Loaded & Python Backdoor

The Russian threat group TAG-110, linked to BlueDelta (APT28), is actively targeting organizations in...