Social sign-in is not secured: ATO on Booking.com, Codecademy and 100 more Apps

TLDR: A direct link to the interesting technical information: https://salt.security/blog/a-new-oauth-vulnerability-that-ma...