Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-11 · source-backed
Researcher bobdahacker disclosed that a missing Firestore security rule let any authenticated user query every meeting on the platform, spanning 35,003 domains including government entities in 23 countries. Records exposed creator emails, conferencing provider, timestamps, and a conference ID usable to join roughly 1,000 live Google Meet/Teams calls uninvited. Reported January 28, CTO never responded, still unpatched at the July 22 final follow-up, confirmed live by Dark Reading on August 4. This is a one-line security rule. The vulnerability isn't technical, it's organizational: nobody at tl;dv owned the inbox where this arrived.
Each link below shares sources, entities, or timing with this story.
Google Meet built by Google / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Google Meet built by Google); both cover July, Teams; overlapping topics (email, user).
Google Meet built by Google / Shared entities / Earlier coverage
Linked by a graph relationship (Google Meet built by Google); both cover August, July; earlier August coverage from 2026-08-02.
Google Meet built by Google / Shared entity: August / Earlier coverage
Linked by a graph relationship (Google Meet built by Google); both cover August; earlier August coverage from 2026-08-07.
Google Meet built by Google / Shared entity: July / Earlier coverage
Linked by a graph relationship (Google Meet built by Google); both cover July; earlier July coverage from 2026-07-30.
Linked by a graph relationship (Google Meet built by Google); both cover July; earlier July coverage from 2026-07-27.
Linked by a graph relationship (Google Meet built by Google); both cover July; earlier July coverage from 2026-07-25.
Linked by a graph relationship (Google Meet built by Google); both cover July; earlier July coverage from 2026-07-10.
Google Meet built by Google / Shared entities / Earlier coverage
Linked by a graph relationship (Google Meet built by Google); both cover August, July; earlier August coverage from 2026-08-07.