Business email hijacked to send spam, raising questions about access control for AI automations
Hot_Thought1162 · reddit · 2026-11-12
A property business owner reports their Google Workspace email was used to send pornographic spam to large lists under different female sender names, and outgoing emails containing SMTP credentials were found going to an unfamiliar external address. The cause is still under investigation. They ask the community: how to grant developers and AI automations access without sharing the main login, how to track who and which tools can access systems, and how to revoke stale access safely.
More from Safety
- Paul Scharre launches CNAS AI Policy Lab: 'This is the moment' for AI policy — paul_scharre · 2026-11-13
- AI policy veteran Paul Scharre on Altman's "singularity" claim: this is crunch time — paul_scharre · 2026-11-13
- Open weights memo: 'Open Weights and American AI Leadership' argues open models underpin US AI edge — _lewtun · 2026-11-13
- Apache HTTP/2 race condition flaw CVE-2026-119618 scores CVSS 9.8, patch to 2.4.71 — hunarbatra · 2026-11-13
- ScrapeBench finds AI agents comply with scraping policies less than 5% of the time — Joseph Marvin Imperial · 2026-11-13
- Nvidia's turmoil stirs counterparty risk for defense clients; Palantir expands open-weight AI — iamKierraD · 2026-11-13