BROADCASTS.com

Tal Skverer from Astrix Security joins to discuss their work on "GhostToken \u2013 Exploiting GCP application infrastructure to create invisible, unremovable trojan app on Google accounts." Astrix\u2019s Security Research Group revealed a 0-day flaw in Google\u2019s Cloud Platform (GCP) on June 19, 2022, which was found to affect all Google users.\nThe research states "The vulnerability, dubbed \u201cGhostToken\u201d, could allow threat actors to change a malicious application to be invisible and unremovable, effectively leaving the victim\u2019s Google account infected with a trojan app forever." Google issued a patch to this vulnerability in April of this year, but researchers explain why this can be severe.\nThe research can be found here:\nGhostToken \u2013 Exploiting GCP application infrastructure to create invisible, unremovable trojan app on Google accounts\n\nLearn more about your ad choices. Visit megaphone.fm/adchoices