google oauth is broken sort of

Open link in next tab

Google OAuth is broken (sort of) - Truffle Security

https://trufflesecurity.com/blog/google-oauth-is-broken-sort-of/

A Google Oauth vulnerability that allows employees to maintain access to services after they're offboarded.

Google OAuth is broken (sort of) - Truffle Security

Initially saw this article from Brian Krebs mastodon account.

https://infosec.exchange/@briankrebs/111608035574860035