TAG_QUERY()
#Oauth
2 case files connected to this signal.
MATCHES002QUERY COMPLETE
CASE_007CRITICAL
RESEARCH / BUGBOUNTY
Hunting Account Takeovers in the Wild West of MCP OAuth Servers
How misconfigured Dynamic Client Registration in MCP OAuth servers enables one-click account takeover attacks against AI-integrated platforms
2026-01-24 · 7 MINREAD_REPORT() ↗
CASE_006CRITICAL
RESEARCH / ATO
Account Takeover via an Unsanitized Facebook OAuth Redirect Scheme
How a one-character mutation in a mobile OAuth redirect scheme allowed authentication tokens to be intercepted by a malicious app.
2023-09-01 · 4 MINREAD_REPORT() ↗