Google Moves to Block CSRF Attacks

The Register’s Dan Goodin has news about a belated but significant move by Google to protect its GMail and other services from CSRF (cross site request forgery) attacks.
In recent days, Google’s login pages began setting a cookie with a unique token on each user’s browser.  That same value is also embedded into the login form. If the two don’t match, the user will be unable to log in.  Read the full article [theregister.co.uk]

The Register’s Dan Goodin has news about a belated but significant move by Google to protect its GMail and other services from CSRF (cross site request forgery) attacks.

In recent days, Google’s login pages began setting a cookie with a unique token on each user’s browser.  That same value is also embedded into the login form. If the two don’t match, the user will be unable to log in.  Read the full article [theregister.co.uk]

Suggested articles

Hackers Hijack Smart TVs to Promote PewDiePie

The same hacking duo behind the recent “PewDiePie” printer hacks are back – this time with publicly exposed Chromecast, Google Home and smart TV systems as their targets.

Discussion

Subscribe to our newsletter, Threatpost Today!

Get the latest breaking news delivered daily to your inbox.