Google bug let strangers find your phone number with just your Gmail address

A new vulnerability discovered by security researcher, brutecat, allowed attackers to bruteforce the phone numbers of Google users with minimal effort.
This newly disclosed vulnerability, reported on June 9, 2025, exposed a flaw in Google's account recovery system. By exploiting a weakness in Google's non-JavaScript account recovery form, an attacker could systematically guess a target's phone number based on minimal information. — Read the rest
The post Google bug let strangers find your phone number with just your Gmail address appeared first on Boing Boing.