Vulnerabilities appear frequently and it is something that can affect services of all kinds. The problem is when it occurs on a widely used platform and where we can also have sensitive information stored. It is there where we must take certain precautions so as not to fall into errors.
Security breach in Drive
This is an investigation that they have carried out from the cloud incident company Mitiga. He has published results on a deficiency that affects Google Workspace that could allow an attacker to leak data from Google Drive without leaving any kind of trace. Keep in mind that this Google service has always been a target for hackers, who have taken advantage of any type of known bug.
But what exactly does it consist of? It affects those who use Google Workspace, which is a paid service. Allows you to give visibility to the Drive resources of an organization and allows you to copy, delete, download or view the files. A hypothetical attacker could gain access to the administrator user and revoke the license to later reassign it. It could download the files, without leaving a record, even without that user already having a paid license.
From mitigates They indicate that they have contacted the Google security team to inform them of the problem, but they assure that they have not received an answer for now. It is to be hoped that, in a short time, Google will launch a solution to prevent a hypothetical attacker from exploiting this security flaw and affecting users. You can see the full Mitiga report.
How to protect yourself from this problem
We are not only talking about this specific failure, but about any other that may affect Google Drive. Could put your files at risk if you don’t take action. Our advice is that you always check very well that you have everything updated. When a vulnerability emerges, sooner or later they fix it and that comes in the form of an update.
Also, you should be careful with the files you share. Do not leave them exposed on the network, so that anyone can access. A good idea is to encrypt them. You can upload previously encrypted content and thus, in case it is leaked, they will be more protected and you will have fewer problems.
On the other hand, it is always essential protect equipment. Basically there are two key factors: having a good antivirus and having it updated. An antivirus will prevent the entry of malware that could infect your system and steal Drive files. Updating it will allow correcting vulnerabilities that may exist.
In short, as you can see there is a security flaw that can affect Google Drive. It is very important to take action whenever a failure of this type appears. That will help you to be more protected and that the files are not exposed. It is important to always avoid failures when uploading files to Drive, so as not to have problems.
