Tag: oauth2
2 articles
SAP Discloses Maximum-Severity OAuth2 SSRF Flaw in Cloud SDK
SAP has patched a critical OAuth2 vulnerability in its Cloud SDK for Python, which could allow attackers to steal sensitive credentials by redirecting token requests to a server of their choice. This flaw, tracked as CVE-2026-89111, poses a major threat to multi-tenant BTP applications.
Microsoft Warns of Device Code Phishing Attacks via Legitimate Website
Beware of device code phishing attacks that can trick you into giving away access to your accounts, even on legitimate websites. Hackers are using a clever tactic that exploits Microsoft's authentication endpoint to steal your credentials.