In research presented last month, security researchers said that many of the apps listed on the G Suite Marketplace have access to users’ Gmail and Drive accounts, but also communicate with undisclosed external services, creating the opportunity for secret data exfiltration from Google accounts. The research, carried out by Irwin Reyes and Michael Lack of Two Six Labs, analyzed the permissions requested by third-party Google apps listed on the G Suite Marketplace.

Read full article on ZDNet