Posts tagged with #phishing

• 🔒 Zero-Click Phishing & Email DoS via Google's Identity Toolkit

  Mar 10, 2026 (next week) 1000 rvfet

  

  abuse-vrp dos phishing writeups

  Affected Company:

  Google

  How I discovered a logic flaw in Google's Identity Toolkit that allowed unauthenticated attackers to send unlimited official security notifications with content injection for high-fidelity phishing and DoS.

  Full Write-up