News
Gone Phishing, Got a Token: When Separate Flaws Combine
1+ mon, 1+ week ago (999+ words) Download our Latest Industry Report " Continuous Offensive Security Outlook 2026 TL;DR: Two medium-severity flaws, an unsecured email API endpoint and verbose error messages exposing OAuth tokens, chain together to enable authenticated phishing that bypasses all email security controls, persistent access…...