The Hacker News

A critical vulnerability has been discovered in the Google Apps for Work that allows hackers to abuse any website’s domain name based email addresses, which could then be used to send phishing emails on company’s behalf in order to target users.

http://thehackernews.com/2015/03/google-apps-vulnerability.html