CROOKS BYPASSED GOOGLE'S EMAIL VERIFICATION TO CREATE WORKSPACE ACCOUNTS, ACCESS 3RD-PARTY SERVICES

Summary from the TLDR InfoSec newsletter

Crooks bypassed Google's email verification to create Workspace accounts and access third-party services - the issue was fixed within 72 hours of discovery.