Google says it recently fixed an authentication weakness that allowed crooks to circumvent email verification needed to create a Google Workspace account, and leverage that to impersonate a domain ...

The larger change around security involves email verification. Bluesky says that, in the coming days, users will receive an in-app prompt to verify their email addresses.