Ars Technica

Google plans to stop using insecure SMS verification in Gmail

A username and password just won't cut it anymore. Users around the world logging into Gmail have often relied on Google SMS pings to securely access their accounts, but that's changing. Google now ...
The Daily Dot

A Gmail update is coming. Here’s what you need to know so you don’t lose your account

If you’re still relying on text message codes to log into Gmail, it might be time for an upgrade. Google is now encouraging users to stop using SMS-based two-factor authentication (2FA) and switch to ...
Bleeping Computer

Malware abuses Google OAuth endpoint to ‘revive’ cookies, hijack accounts

Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an ...
Bleeping Computer

Google: Malware abusing API is standard token theft, not an API issue

Google is downplaying reports of malware abusing an undocumented Google Chrome API to generate new authentication cookies when previously stolen ones have expired. In late November 2023, ...
来自MSN

Google is ditching SMS - and will now use QR codes for Gmail account authentication

Google is officially moving away from using SMS messages in its Gmail account two-factor authenticator. Gmail spokesperson Ross Richendrfer told Forbes, “we want to move away from sending SMS messages ...