Read news on oAuth with our app.
Read more in the app
31,000 Twitch users hit by malicious browser extension — OAuth tokens leaked via Russian proxy network
Twitch extension with 30K installs exposes users’ OAuth tokens
Webinar: How malicious OAuth apps can lead to Google Workspace breaches
Russian snoops add OAuth abuse to targeted phishing campaigns
OAuth for all
ConsentFix v3 attacks target Azure with automated OAuth abuse
Vercel breach exposes the OAuth gap most security teams cannot detect, scope or contain
The Vercel breach: OAuth attack exposes risk in platform environment variables
AI-assisted intruders pwned Vercel via OAuth abuse and a pilfered employee account
Microsoft: Hackers abuse OAuth error flows to spread malware
What Is OAuth?
ConsentFix debrief: Insights from the new OAuth phishing attack
Microsoft 365 accounts targeted in wave of OAuth phishing attacks
New CoPhish attack steals OAuth tokens via Copilot Studio agents
New 'CoPhish' technique wraps OAuth phishing in Microsoft Copilot
Find hidden malicious OAuth apps in Microsoft 365 using Cazadora
Salesloft breached to steal OAuth tokens for Salesforce data-theft attacks
An illustrated guide to OAuth
What Is OAuth and How Does It Work?
Cloudlflare builds OAuth with Claude and publishes all the prompts
