Google is introducing mandatory multi-factor authentication (MFA) for all Cloud accounts by end-2025, starting with reminders and information for users. By early 2022, users signing in with a password will need to switch to Google’s two-step verification. The compulsory MFA will apply to all business and enterprise admin and user accounts, based on evidence that MFA makes users 99% less vulnerable to hacks. The company will also liaise with identity providers for seamless MFA implementation.

Mandiant warns of attacks on newly-disclosed Ivanti remote takeover threat
Google’s Mandiant team has issued an alert about a remote code execution flaw in the Ivanti Connect Secure VPN platform. The vulnerability, designated CVE-2025-22457, is