Brian Krebs / Krebs on Security:
Google fixes a flaw after hackers bypassed email verification to create “a few thousand” Workspace accounts to access 3rd-party apps via Sign in with Google — Google says it recently fixed an authentication weakness that allowed crooks to circumvent the email verification required …