Twin Google flaws allowed researcher to get from YouTube ID to Gmail address in a few easy steps

Infosec news roundup: a Google People API/Gaia ID chaining bug could leak YouTube channel emails (fixed, bounty awarded); Fortinet disclosed a CVSS 8.0 FortiOS privilege-escalation flaw (CVE-2024-40591) requiring specific conditions; Kraken claimed a Cisco data leak; Zacks allegedly had a breach exposing ~12 million user records (names, addresses, unsalted SHA-256 password hashes); DOGE site hosting issues exposed some government-related data; and the FBI reported disrupting crypto investment scams.