UPDATED 21:17 EDT / JULY 18 2017

APPS

Google rolls out new security alerts for G Suite and App Scripts

Google Inc. today rolled out a new security alert feature across its G Suite and App Scripts services following a widespread phishing attack that targeted users in May.

The new alert feature aims to prevent a user accidentally click on a phishing link. It includes an added security alert delivered via a pop-up interstitial to warn users that a web app or app script they are about to use is unverified. Legitimate apps can connect into G Suites services through the platform’s application program interface, but that API door also means that apps with nefarious intent can also attempt to connect.

“These new notices will inform users automatically if they may be at risk,” Google said in a blog post, “enabling them to make informed decisions to keep their information safe, and will make it easier to test and develop apps for developers.”

The new “unverified app” screen is presented to a user seeking permission to grant a web app access to G Suite in a way that would seem familiar to Google Chrome users in that it includes an exclamation mark inside a red triangle – Chrome’s version of a warning symbol. As is the case when Google warns users attempting to connect to a suspicious website, users who see this new warning can proceed and grant the app permission, meaning that Google has at least attempted to warn them of the risk versus preventing the risky connection altogether.

In addition to protecting users, Google is also pitching the new service as beneficial for app developers. “This new notice will also help developers test their apps more easily,” Google added. “Since users can choose to acknowledge the ‘unverified app’ alert, developers can now test their applications without having to go through the OAuth client verification process first.”

This new feature isn’t Google’s first response to the phishing attacks in May. Earlier this month, the company announced “OAuth apps whitelisting,” a feature that allows G Suite administrators to control and restrict how third-party applications use employees’ data.

Image: Google

A message from John Furrier, co-founder of SiliconANGLE:

Your vote of support is important to us and it helps us keep the content FREE.

One click below supports our mission to provide free, deep, and relevant content.  

Join our community on YouTube

Join the community that includes more than 15,000 #CubeAlumni experts, including Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsinger, and many more luminaries and experts.

“TheCUBE is an important partner to the industry. You guys really are a part of our events and we really appreciate you coming and I know people appreciate the content you create as well” – Andy Jassy

THANK YOU