Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Incident Response

New Bug Prompts Earlier End to Google+ Social Network

Google said Monday it will close the consumer version of its online social network sooner than originally planned due to the discovery of a new software bug.

Google said Monday it will close the consumer version of its online social network sooner than originally planned due to the discovery of a new software bug.

The Google+ social network will close in April — four months earlier than planned — and the internet giant will focus on operating a version tailored for businesses, according to G Suite product management vice president David Thacker.

Application programming interface programs (APIs) used by developers to access Google+ data will be shut down within 90 days, according to Thacker.

“With the discovery of this new bug, we have decided to expedite the shut-down of all Google+ APIs,” Thacker said in a blog post.

“While we recognize there are implications for developers, we want to ensure the protection of our users.”

A new bug introduced via a software update in November was discovered during routine testing and fixed, according to the company.

Google determined that the vulnerability affected approximately 52.5 million users, allowing applications to see profile information such as name, occupation, age and email address even if access was set to private.

“No third party compromised our systems, and we have no evidence that the app developers that inadvertently had this access for six days were aware of it or misused it in any way,” Thacker said.

Advertisement. Scroll to continue reading.

In October, Google announced plans to shut down the social network after fixing a bug exposing private data in as many as 500,000 accounts.

A security audit had revealed a software bug that gave third-party apps access to Google+ private profile data people meant to share only with friends.

The data involved was limited to optional profile fields, including name, age, gender, occupation and email address, Google said.

There was no evidence found at the time that developers had taken advantage of the bug, according to Google.

Google+ failed to gain meaningful traction after being launched in 2011 as a challenge to Facebook.

A Google spokesperson cited “significant challenges in creating and maintaining a successful Google+ that meets consumers’ expectations” along with “very low usage” as reasons for pulling the plug.

The social network allows users to download and share data such as pictures and videos.

Meanwhile, Google planned to add new workplace-oriented features to enhance the appeal of Google+ as a “secure corporate social network” to be used inside business operations.

“Our review showed that Google+ is better suited as an enterprise product where co-workers can engage in internal discussions,” the California-based internet firm said.

RelatedIndustry Reactions to Google+ Security Incident

Written By

AFP 2023

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Cody Barrow has been appointed the new CEO of threat intelligence company EclecticIQ.

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

More People On The Move

Expert Insights

Related Content

Vulnerabilities

Less than a week after announcing that it would suspended service indefinitely due to a conflict with an (at the time) unnamed security researcher...

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...

IoT Security

A group of seven security researchers have discovered numerous vulnerabilities in vehicles from 16 car makers, including bugs that allowed them to control car...

Vulnerabilities

A researcher at IOActive discovered that home security systems from SimpliSafe are plagued by a vulnerability that allows tech savvy burglars to remotely disable...

Risk Management

The supply chain threat is directly linked to attack surface management, but the supply chain must be known and understood before it can be...

Cybercrime

Patch Tuesday: Microsoft calls attention to a series of zero-day remote code execution attacks hitting its Office productivity suite.