Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts
By The Hacker News Publication Date: 2026-08-20 19:59:00 Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging…
Tag: OAuth
FBI Warns ‘Kali365’ Phishing Kit Hijacks Microsoft 365 OAuth Tokens
By Kevin Poireault Publication Date: 2026-05-25 09:30:00 A new phishing-as-a-service (PhaaS) platform called Kali365 is being distributed in the wild,…
Device Code Phishing Hits 340+ Microsoft 365 Orgs Across Five Countries via OAuth Abuse
By The Hacker News Publication Date: 2026-03-25 11:34:00 Cybersecurity researchers are calling attention to an active device code phishing campaign…
Microsoft Warns OAuth Redirect Abuse Delivers Malware to Government Targets
By The Hacker News Publication Date: 2026-03-03 09:20:00 Ravie LakshmananMar 03, 2026Phishing / Malware Microsoft on Monday warned of phishing…
Microsoft OAuth scams abuse redirects for malware delivery
By Jessica Lyons Publication Date: 2026-03-03 00:33:00 Microsoft has warned organizations about ongoing OAuth abuse scams that use phishing emails…
Microsoft 365 accounts targeted in wave of OAuth phishing attacks
By Bill Toulas Publication Date: 2025-12-19 17:19:00 Multiple threat actors are compromising Microsoft 365 accounts in phishing attacks that leverage…
Vulnerability in Google’s OAuth System exposes millions to risk
Google acknowledges issue but places onus on business Image: Google claims strong and… Article Source https://www.computing.co.uk/news/2025/security/vulnerability-in-google-oauth-system-exposes-millions-to-risk
A flaw in Google OAuth system is exposing millions of users via abandoned accounts
Buying domains from businesses that shut down could grant access to their SaaS accounts, research finds Google argues it’s not…
Google OAuth Vulnerability Exposes Millions via Failed Startup Domains
Jan 14, 2025Ravie LakshmananVulnerability / Data Privacy New research has pulled back the curtain on a “deficiency” in Google’s “Sign…
Google OAuth flaw lets attackers gain access to abandoned accounts
A weakness in Google’s OAuth “Sign in with Google” feature could enable attackers that register domains of defunct startups to…