MILLIONS OF ACCOUNTS VULNERABLE DUE TO GOOGLE'S OAUTH FLAW

Summary from the TLDR Web Dev newsletter

A flaw in Google's "Sign in with Google" OAuth allows attackers to access accounts of former employees at defunct startups by purchasing the company's domain. This vulnerability affects millions of Americans, granting access to sensitive data across various SaaS platforms like Slack, Notion, and HR systems containing social security numbers. Google is currently working on a fix.