Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [QUIET] · [TECHNOLOGY]
2 clusters · 4 sources · 8 days · First seen · Last updated
Gmail email delegation security risks
Overview
The Gmail delegation feature, designed to allow assistants or colleagues to manage an inbox, has been identified as a potential security risk. Because the feature allows third parties to read, send, and delete messages without requiring the owner’s password or bypassing two-factor authentication, it can lead to unauthorized access if permissions are not manually revoked.
Security concerns have been raised regarding the fact that these permissions do not automatically expire. Consequently, changing an account password will not revoke delegated access. Experts advise users to review their ‘Accounts and Import’ settings to identify and remove outdated delegates. This risk is compounded by the fact that personal account users may lack visibility into delegate activity, as certain settings allow delegates to browse inboxes without leaving ‘unread’ indicators.
Entities
Timeline
-
[TECHNOLOGY] 2 sourcesCybersecurity: Gmail delegation and digital fraud risks
Cybersecurity guidance highlights the risks of forgotten Gmail email delegation settings and common digital threats like spoofing, phishing, and ransomware affecting both individuals and businesses.
-
[TECHNOLOGY] 2 sourcesGmail delegation feature allows inbox access without passwords
The Gmail delegation feature allows users to grant others access to their inbox without sharing passwords, posing a privacy risk if old permissions are not manually revoked.
Sources
altibox.no · dagens.no · geekspin.co · nyheder24.dk