API vulnerability in airline-linked travel service exposed millions to account takeovers, booking fraud, and data theft ...

Google actually does have tech in its OAuth configuration that should prevent the risks outlined by Ayrey, if the SaaS cloud provider uses it. It’s called a “sub-identifier,” which is a ...