Users reuse passwords again, splendid

Same story, different day, as consumer and enterprise Gmail accounts across the globe fall victim to good old password reuse, automated stuffing, and phishing. Attackers cheerfully bypassed standard protections and hijacked recovery settings because basic account hygiene is apparently dead. Safeguarding ourselves requires the thrilling chore of auditing connected OAuth applications, inspecting sneaky mailbox forwarding rules, and finally enforcing phishing-resistant MFA before everyone completely gives up.