Hackers have found a way to gain access to Google accounts without needing the user's password, allowing continuous access even after a password reset. Google is upgrading its defenses to protect users from malware and phishing attacks.