OAuth

Everything RedTeam Monitor has reported about OAuth: 2 stories, newest first. Part of our Vulnerabilities coverage.

Attackers Bypass Better Auth Login by Swapping OAuth Tokens for Magic Links

Unauthenticated users can hijack accounts in Better Auth versions prior to 1.7.7 by misusing OAuth state values as verification tokens, a critical flaw rated 9.3 by NVD.

Oct 14, 2026

Cloud Security

How Single Sign-On Works: The Protocol Mechanics Behind Auth

Single sign-on shifts trust from local password checks to signed cryptographic tokens, creating a single point of failure that centralizes both access and attack surfaces.

Oct 9, 2026