Everything Threat Times has reported about OAuth: 4 stories, newest first. Part of our Vulnerabilities coverage.
A security researcher found that Google’s developer documentation sites exposed an OAuth secret that allowed unauthenticated remote code execution via pickle deserialization.
A flaw in the self-hosted task manager allowed limited API tokens to escalate privileges by minting unrestricted session credentials.
A critical vulnerability in Pingvin Share X permits attackers to bypass authentication and seize control of user accounts, including administrative roles.
Attackers are exploiting forgotten OAuth connections to access corporate data, as seen in the recent Klue incident.