The OAuth Vulnerability That Shook the Cybersecurity World


December 2020. Security teams at Microsoft, FireEye, and multiple US government agencies discovered they'd been breached. Not through a zero-day exploit or sophisticated malware.

Through stolen OAuth tokens.

The SolarWinds supply chain attack—one of the most sophisticated cyber...