Security News

Dont trust OAuth: Why the Google Docs worm was so convincing (ArsTechnica)
2017-05-03 23:48

PayPal Fixes OAuth Token Leaking Vulnerability (Threatpost)
2016-11-28 20:52

PayPal fixed an issue that could have allowed an attacker to hijack OAuth tokens associated with any PayPal OAuth application. The vulnerability was publicly disclosed on Monday by Antonio Sanso,...

OAuth 2.0 Hack Exposes 1 Billion Mobile Apps to Account Hijacking (Threatpost)
2016-11-10 14:41

Mobile app developers need to be aware of improper OAuth 2.0 implementations that have put one billion mobile apps at risk to takeover.

OAuth 2.0 Vulnerability Leads to Account Takeover (SecurityWeek)
2016-11-08 14:13

Over one billion installs of apps using OAuth 2.0 can be remotely hijacked, say researchers (TechRepublic)
2016-11-04 19:28

Google to Revoke OAuth 2.0 Tokens Upon Password Reset (SecurityWeek)
2016-09-22 16:05

Google automates Apps OAuth token revocation (The Register)
2016-09-22 02:35

Researchers find two flaws in OAuth 2.0 (SC Magazine)
2016-01-11 15:55

Except for two new attacks, OAuth is secure (Reddit)
2016-01-11 11:40

'OAuth please do grow up' say Microsoft, Salesforce and IETF (The Register)
2016-01-11 05:25