Many people have used buttons labeled 'Sign in with Google' or 'Sign in with Apple'.While these are convenient features, ...

Microsoft has warned that hackers are exploiting an OAuth redirect feature in a sophisticated phishing campaign targeting government organizations. The attackers use legitimate login prompts to ...

A weakness in Google’s OAuth “Sign in with Google” feature could enable attackers that register domains of defunct startups to access sensitive data of former employee accounts linked to various ...

The FBI’s Internet Crime Complaint Center says a technique called OAuth consent phishing is giving criminals lasting access to victims’ email, cloud files and contacts without ever stealing a password ...

Flaws in the implementation of the Open Authorization (OAuth) standard across three prominent online services could have allowed attackers to take over hundreds of millions of user accounts on dozens ...