Google's not being ghosted from vulnerabilities. episode artwork

EPISODE · Aug 26, 2023 · 17 MIN

Google's not being ghosted from vulnerabilities.

from Research Saturday · host N2K Networks

Tal Skverer from Astrix Security joins to discuss their work on "GhostToken – Exploiting GCP application infrastructure to create invisible, unremovable trojan app on Google accounts." Astrix’s Security Research Group revealed a 0-day flaw in Google’s Cloud Platform (GCP) on June 19, 2022, which was found to affect all Google users. The research states "The vulnerability, dubbed “GhostToken”, could allow threat actors to change a malicious application to be invisible and unremovable, effectively leaving the victim’s Google account infected with a trojan app forever." Google issued a patch to this vulnerability in April of this year, but researchers explain why this can be severe. The research can be found here: GhostToken – Exploiting GCP application infrastructure to create invisible, unremovable trojan app on Google accounts

Episode metadata supplied by the publisher feed · Published Aug 26, 2023

Embed this episode

NOW PLAYING

Google's not being ghosted from vulnerabilities.

0:00 17:07

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

No similar episodes found.

No similar podcasts found.

Frequently Asked Questions

How long is this episode of Research Saturday?

This episode is 17 minutes long.

When was this Research Saturday episode published?

This episode was published on August 26, 2023.

Can I download this Research Saturday episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.
URL copied to clipboard!