Proof of Google Calendars leaking private information online
By MYBRANDBOOK
It is a warning signal for you to make your planning in the calendar, which could be made public will make all events visible to the world, including via Google search. Are you sure?"
As thousands of Google Calendars have been found to be exposing private data online. If you have ever shared your Google Calendars, or maybe inadvertently, with someone that should not be publicly accessible anymore, you should immediately go back to your Google settings and check if you're exposing all your events and business activities on the Internet accessible to anyone.
At the time of writing, there are over 8000 publicly accessible Google Calendars, searchable using Google engine itself, that allow anyone to not only access sensitive details saved to them but also add new events with maliciously crafted information or links, security researcher Avinash Jain told The Hacker News.
Avinash Jain, a security researcher from India working in an e-commerce company, Grofers, who previously found vulnerabilities in other platforms like NASA, Google, Jira, and Yahoo.
"I was able to access public calendars of various organizations leaking out sensitive details like their email ids, their event name, event details, location, meeting links, zoom meeting links, google hangout links, internal presentation links and much more," Avinash says in a post exclusively shared with The Hacker News.
Well, since it's intended behavior of the Calendar Service that comes as a handy feature to collaborate with people by making a Calendar public, one can not directly blame Google for the exposed data.
More than 8000 such Google Calendars were discovered. These were indexed by Google’s search engine which means anyone can access data and add events to these Calendars.
Employees may make calendars public for a specific group of people and intend to share the link with them only. But it gets indexed on Google and anyone can access it.
“While this is more of an intended setting by the users and intended behavior of the service but the main issue here is that anyone can view anyone public calendar, add anything on it — just by a single search query without being shared the calendar link,” says Avinash in the blog.
Using an advanced Google search query (Google Dork), one can list all publicly available Calendars within seconds and access every information, including sensitive corporate data belonging to some organizations, as shown in the screenshots shared by Avinash.
"Various calendars belonged to many of the top 500 Alexa company's employees as well, which intentionally/unintentionally were made public by the employee themselves," Avinash warns.
A few months ago, security firm Kaspersky also discovered scammers abusing Google Calendar service to target users with credential-stealing attacks, where phishers were sending victims an email containing a crafted event invitation with malicious links.
BREAKING NEWS
TECHNO TRENDS
Happiest Minds brings in an innovative GenAI chatbot
Happiest Minds Technologies has announced the new GenAI chatbot - ‘hAPPI...
Government mandates encryption for CCTV cameras to ensure netw
In the wake of issuing an internal advisory on securing CCTV cameras at g...
TRAI recommends allowing only Indian entities to participate i
The Telecom Regulatory Authority of India (TRAI) has recommended that onl...
Galaxy AI is available on more devices with Samsung One UI 6.1
Samsung has expanded the range of smartphones to which One UI 6.1 and Gala...
E-Magazine
TECHNOTAINMENT
Disney+ Hotstar wins the Best OTT Platform of the year
Film Critics Guild and Group M Motion Entertainment, in collaboration with
Miss World 2024: Krystyna Pyszková of the Czech Republic wins
Krystyna Pyszková of the Czech Republic has been crowned as the 71st Miss
MOVERS & SHAKERS
Brillio appoints Ashish Singh to its Board of Directors
Brillio has announced that Ashish Singh has been appointed to the company
JSW One Platforms ropes in Dr Ranjan Pai as Independent Direct
JSW One Platforms, part of US$23 billion JSW Group has appointed Dr Ranjan
OPEN YOUR EYES
INTERVIEWS
Lenovo aims to solve customers' critical business needs throug
enovo recognizes the immense potential and the crucial role that technology
ETEK building a cybersecurity aware community
ETEK is a Global Managed Security Services expert with 30 years of experien
HOT PICK
HP launches first laptop in India with Microsoft CoPilot butto
HP has launched sleek and stylish Envy x360 14 laptops in India which beco
OnePlus debut its Nord CE4 smartphone
OnePlus Nord CE4 continues the trend of attention-grabbing design with two
MAKE IN INDIA BRANDS
SECUREYE SERVICES PVT. LTD.
NETWEB TECHNOLOGIES INDIA LTD.
TATA CONSULTANCY SERVICES
DIGISOL SYSTEMS LTD.
EMINENT CIO'S OF INDIA
ICONS OF INDIA
Technology Icons Of India 2023: Honorary Prof. N. Balakrishnan
Prof. N. Balakrishnan is an Indian aerospace and computer scientist. H...
Technology Icons Of India 2023: Nikhil Rathi
Nikhil Rathi, Co-founder & CEO of Web Werks, a global leader in Data C...
Technology Icons Of India 2023: Rajiv Srivastava
Rajiv Srivastava is the Managing Director of Redington Group. With 35 ...
PARTNER SPEAKERS
PSU
INDIANOIL helps reach precious petroleum fuels to every nook and corner of the country
IndianOil, a diversified, integrated energy major with presence in alm...
GSTN aims to integrate indirect tax ecosystem on a shared IT infrastructure
Goods and Services Tax Network (GSTN) has built Indirect Taxation plat...
PGCIL transforming India with its wide power transmission network
Engaged in power transmission, POWERGRID or PGCIL is a stated owned In...
VIDEOS
Top 25 Brands
Value-Added Distribution
Crayon Software Experts India Pvt Ltd
Crayon helps its customers build the commercial and technical foundati...
RAH INFOTECH
RAH Infotech is India’s fastest growing technology value added dist...
ADITYA INFOTECH LTD.
Aditya Infotech Ltd. (AIL) – the technology arm of Aditya Group, is ...
ITFORUM 2024
WIITF 2024
CMO of the Year
WOMEN LEADERSHIP
EMINENT CIO's OF INDIA
TRENDS IN TECHNOLOGY
MORE VIDEOS
ADVERTISEMENTS
TECHNOLOGY DISRUPTION
UNICORNS REVOLUTIONISING
