Browsing Tag
OAuth
7 posts
Palo Alto Networks, Zscaler and PagerDuty Hit in Salesforce Linked Data Breaches
Hackers exploited the Salesloft Drift app to steal OAuth tokens and access Salesforce data, exposing customer details at…
September 2, 2025
Google Reveals UNC6395’s OAuth Token Theft in Salesforce Breach
A new advisory from Google and Mandiant reveals a widespread data breach in Salesforce. Learn how UNC6395 bypassed…
August 27, 2025
XSS and OAuth Combo Threatens Millions of Users Due to Hotjar Flaw
Cybersecurity Experts Uncover Critical Vulnerabilities in Leading Web Analytics Platform Hotjar, Potentially Exposing Sensitive Data of Millions of…
July 29, 2024
Malware Leveraging Google Cookie Exploit via OAuth2 Functionality
Among others, developers of the infamous Lumma, an infostealer malware, are already using the exploit by employing advanced…
December 29, 2023
Microsoft: Storm-1283 Sent 927,000 Phishing Emails with Malicious OAuth Apps
Cloud Security Shakeup: Experts Urge Caution as OAuth Becomes Hacker Playground.
December 14, 2023
Social Login Flaws in Popular Websites Risked Billions of User Accounts
The critical API security flaws in the social sign-in and OAuth (Open Authentication) implementations affected high-profile companies like…
October 24, 2023
New Spam Attack Abusing OAuth Apps to Target Microsoft Exchange Servers
According to Microsoft 365 Defender Research Team, in an incident they analyzed, malicious OAuth applications were deployed on compromised cloud tenants, and eventually, attackers took over Exchange servers to carry out spam campaigns.
September 23, 2022