Salesloft breach shows how OAuth tokens abused by trusted apps enable data exposure, underscoring the need for Zero Trust and ...

The callback feature in Twitter's OAuth implementation can be abused, a researcher said at Hack in the Box A feature in the Twitter API (application programming interface) can be abused by ...

Rumors of a new OAuth application programming interface for Gmail were reported in TechCrunch earlier this week, and now the first service using the tool is up and running. Email networking startup ...

We’re now all too familiar with the ubiquitous “Sign in with Google” button we encounter all over the internet. For most of us, it has become the go-to “easy button” for managing the sprawling set of ...

Researchers have discovered a flaw in Google’s OAuth system that could allow attackers to access potentially sensitive data from former employee accounts at defunct startups. Google’s OAuth is the ...

Microsoft has disabled multiple fraudulent, verified Microsoft Partner Network accounts for creating malicious OAuth applications that breached organizations' cloud environments to steal email. In a ...

Buying domains from businesses that shut down could grant access to their SaaS accounts, research finds Google argues it's not a vulnerability, and that businesses should make sure they're not leaving ...

The breach, now known to have begun in March, raises questions about why it took six months for Salesloft to detect the ...