A new vulnerability discovered by security researcher, brutecat, allowed attackers to bruteforce the phone numbers of Google users with minimal effort.
This newly disclosed vulnerability, reported on June 9, 2025, exposed a flaw in Google's account recovery system. By exploiting a weakness in Google's non-JavaScript account recovery for…
Keep reading with a 7-day free trial
Subscribe to Boing Boing to keep reading this post and get 7 days of free access to the full post archives.