Researchers warn of spear-phishing exploit in Google Docs

Threat actors have found an exploit in a Google Docs comment feature that uses Google’s own automated email notification function to send malicious links.

Email security specialists Avanan said it had notified Google of the flaw on 3 January after noticing a spike in usage over December 2021.

The…