A critical security vulnerability recently uncovered in Google’s account recovery process could have led to the exposure of users’ phone numbers even those who thought themselves protected.
This issue emerged when a security researcher, testing Google’s resilience against JavaScript-disabled attacks, found that an endpoint...