Warning: A Google Drive 'Feature' Could Let Attackers Trick You Into Installing Malware

 

An unpatched security weakness in Google Drive could be exploited by malware attackers to distribute malicious files disguised as legitimate documents or images, enabling bad actors to perform spear-phishing attacks comparatively with a high success rate.

The latest security issue—of which Google is aware but, unfortunately, left unpatched—resides in the "manage versions" functionality offered by Google Drive that allows users to upload and manage different versions of a file, as well as in the way its interface provides a new version of the files to the users.

 

For more info, https://thehackernews.com/2020/08/google-drive-file-versions.html

Security News Update - 20/11/2011

So I have decided to add a new section to my blog, Information Security News updates....

 This could be done daily, weekly or monthly, depending on what's new... I will try to summarize all the news, and add links to extra details...

 * We are getting more and more reliant on computers in our lives, and actually many things we depend on and take for granted are based on computers... For example, hackers destroyed a pump used by a US water utility as explained in http://goo.gl/uWVUu.... How about that?

 ** Hackers also hit oil, gas, and defense companies in Norway Link: http://goo.gl/uuNdM

 *** There's a new campaign on Twitter, with #worstpassword ... Check out some of the worst passwords you could choose for your accounts, and then some "jokes"

 **** Facebook's new feature, the timeline, has been subject to an attack via XSS (cross-site scripting)... (I will explain what that is in some future blog) Link: http://goo.gl/UOYBc