Google Brute-Force Attack Exposes Phone Numbers in Minutes

Brute-force attacks target Apache Tomcat management panels

A coordinated campaign of brute-force attacks using hundreds of unique IP addresses targets Apache Tomcat Manager interfaces exposed online.

Google brute-force attack exposes phone numbers in minutes

: Chocolate Factory fixes issue, pays only $5K

A Researcher Figured Out How to Reveal Any Phone Number Linked to a Google Account

This article was produced with support from WIRED.A cybersecurity researcher was able to figure out the phone number linked to any Google account, information that is usually not public and is often sensitive, according to the researcher, Google, and 404 Media’s own tests.The issue has since been fixed but at the time presented a privacy issue in which even hackers with relatively few resources could have brute forced their way to peoples’ perso…

Brute Force-Friendly Loophole in Google Recovery Flow Got Fixed After Researcher Demonstrated Full Number Exposure

A now-patched vulnerability in Google's account recovery system briefly opened the door to a subtle but powerful form of data exposure, allowing determined attackers to retrieve a user's private recovery phone number without their knowledge. The weakness, while no longer active, once relied on a series of overlooked interactions between separate account features rather than a single critical flaw—a method that made it difficult to detect and eve…