all InfoSec news
Salt Security Discovers Flaws in Social Login Mechanism Impacting Thousands of Websites and Exposing Billions of Users to Account Takeover
IT Security Guru www.itsecurityguru.org
Today, API security company Salt Security released new threat research from Salt Labs highlighting API security vulnerabilities uncovered in the social sign-in and Open Authentication (OAuth) implementations of multiple online companies, including Grammarly, Vidio, and Bukalapak. The flaws, which have since been remediated, could have allowed for credential leakage and enabled full account takeover (ATO). Salt Labs also […]
account account takeover api api security authentication companies exposing flaws grammarly labs login mechanism oauth research salt salt labs salt security security sign social social login takeover threat threat research today uncovered vulnerabilities websites