<p>Now it can be told. Google has fixed a potentially serious security hole in its Gmail email service, after a security researcher discovered the flaw.</p><p>The Internet giant fixed the flaw within 10 days of being informed by white-hat hacker Oren Hafif, who said the bug involved Gmail's password recovery mechanism.</p><p>"(I)f someone got access to your Gmail account, he can 'password recover' his way to any other web/mobile application out there," Hafif said in a blog post.</p><p>Hafif said an attacker can send a phishing email customized with the target Gmail user's email address in the URL, with the link referring to a site controlled by the attacker.</p><p><a href="http://www.gmanetwork.com/news/story/336987/scitech/technology/google-fixes-security-hole-in-gmail">Keep reading...</a></p><p>Read also:</p><p><a href="http://en.kioskea.net/news/24305-gmail-s-security-hole-resolved">Gmail's Security Hole Resolved</a> (Kioskea)</p><p>Explore: <a href="http://news.google.com/news/more?ncl=doZ1QmJ0IHEBwzM-dFdnSRfwO1AfM&ned=us">2 additional articles.</a></p>