Google has patched a flaw that allowed attackers to circumvent the web giant's two-factor login system and hijack victims' accounts.
Researchers at Duo Security said anyone could bypass a Google account's two-step verification system, reset its master password and gain full control of the profile simply by capturing one of the user’s application-specific passwords.Google Shuts The Door on Two Step Authentication Flaw [theregister.co.uk]
