Truffle security

Vulnerability in ‘Sign in with Google’ risks millions of accounts: Report

A critical flaw in Google’s OAuth authentication system, a way for users to grant third-party applications access to their Google account information without sharing their password, has left millions of user accounts vulnerable to potential data theft, according to a recent report by Truffle security, an open-source security project.

January 17, 2025
January 17, 2025

Vulnerability in ‘Sign in with Google’ risks millions of accounts: Report

A critical flaw in Google’s OAuth authentication system, a way for users to grant third-party applications access to their Google account information without sharing their password, has left millions of user accounts vulnerable to potential data theft, according to a recent report by Truffle security, an open-source security project.