OAuth redirection is being repurposed as a phishing delivery path. Trusted authentication flows are weaponized to move users from legitimate sign‑in pages to attacker‑controlled infrastructure.

Microsoft uncovers OAuth phishing campaigns that abuse login redirects to deliver malware and steal credentials.

A researcher's contention of security flaws in OAuth and OpenID has serious flaws of its own, according to those familiar with the specifications. News of the security issues hit hard Friday claiming ...