GhostToken

Researchers have detailed on a zero-day vulnerability called GhostToken that could let threat actors gain unremovable access to a victim's Google account by converting an authorized third-party app into a…