cognitive cybersecurity intelligence

News and Analysis

Search

OAuth Redirect Flaw in Airline Travel Integration Exposes Millions to Account Hijacking

Cybersecurity researchers uncovered a vulnerability in a popular online travel service, which could have been exploited to gain unauthorized access to users’ accounts to perform activities like booking hotels and car rentals on the victim’s behalf. Although the vulnerability has been patched and the company’s name was not disclosed, successful exploitation could have exposed millions of online airline users worldwide. The flaw was found in service-to-service interactions, a significant risk point for API supply chain attacks.

Source: thehackernews.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts