Serious security flaw in OAuth and OpenID discovered

Malicious attackers can use the 'Covert Redirect' vulnerability in the OAuth 2.0 and OpenID open-source login systems to steal your personal info as well as redirect you to unsafe sites.

















from CNET http://ift.tt/1pWaD6r