Security News

Gmail fake Docs attack: Now Google tightens OAuth rules to block phishing (ZDNet)
2017-05-08 13:48

Attackers Unleash OAuth Worm via 'Google Docs' App (InfoRiskToday)
2017-05-04 14:17

Dont trust OAuth: Why the Google Docs worm was so convincing (ArsTechnica)
2017-05-03 23:48

PayPal Fixes OAuth Token Leaking Vulnerability (Threatpost)
2016-11-28 20:52

PayPal fixed an issue that could have allowed an attacker to hijack OAuth tokens associated with any PayPal OAuth application. The vulnerability was publicly disclosed on Monday by Antonio Sanso,...

OAuth 2.0 Hack Exposes 1 Billion Mobile Apps to Account Hijacking (Threatpost)
2016-11-10 14:41

Mobile app developers need to be aware of improper OAuth 2.0 implementations that have put one billion mobile apps at risk to takeover.

OAuth 2.0 Vulnerability Leads to Account Takeover (SecurityWeek)
2016-11-08 14:13

Over one billion installs of apps using OAuth 2.0 can be remotely hijacked, say researchers (TechRepublic)
2016-11-04 19:28

Google to Revoke OAuth 2.0 Tokens Upon Password Reset (SecurityWeek)
2016-09-22 16:05

Google automates Apps OAuth token revocation (The Register)
2016-09-22 02:35

Researchers find two flaws in OAuth 2.0 (SC Magazine)
2016-01-11 15:55