Google OAuth Vulnerability Exposes Millions via Failed Startup Domains
A "deficiency" in Google's "Sign in with Google" authentication process has been revealed by new study, which takes advantage of a peculiarity in domain ownership to obtain private information.
Dylan Ayrey, co-founder and CEO of Truffle Security, stated in a research released on Monday that Google's OAuth login is insufficient to prevent someone from buying the domain of a defunct firm and using it to recreate email accounts for former workers.
You can use those credentials to log into all of the various SaaS products that the company used, even though you can't access previous email data.
According to the San Francisco-based corporation, the problem might jeopardize the data of millions of American consumers read more about Google OAuth Vulnerability Exposes Millions via Failed ...