Google Account Recovery Vulnerability Exposes Users' Phone Numbers to Attackers