Facebook, Twitter, Google, Microsoft and many other online services users have been hit by a serious new security flaw.
The flaw in two widely used security standards could give anyone access to your account information at any of the online services.
According to Fox News, the flaw, dubbed 'Covert Redirect' by its discoverer, exists in two open-source session-authorization protocols, OAuth 2.0 and OpenID.
Both standards are employed across the Internet to let users log into websites using their credentials from other sites.
Attackers could exploit the flaw to disguise and launch phishing attempts from legitimate websites.
According to the report, the biggest danger of Covert Redirect is that it could be used to conduct phishing attacks, in which cyber criminals seize login credentials, by using email messages containing links to malicious websites disguised as something their targets might want to visit.
You’ve reached your limit of {{free_limit}} free articles this month.
Subscribe now for unlimited access.
Already subscribed? Log in
Subscribe to read the full story →
Smart Quarterly
₹900
3 Months
₹300/Month
Smart Essential
₹2,700
1 Year
₹225/Month
Super Saver
₹3,900
2 Years
₹162/Month
Renews automatically, cancel anytime
Here’s what’s included in our digital subscription plans
Exclusive premium stories online
Over 30 premium stories daily, handpicked by our editors


Complimentary Access to The New York Times
News, Games, Cooking, Audio, Wirecutter & The Athletic
Business Standard Epaper
Digital replica of our daily newspaper — with options to read, save, and share


Curated Newsletters
Insights on markets, finance, politics, tech, and more delivered to your inbox
Market Analysis & Investment Insights
In-depth market analysis & insights with access to The Smart Investor


Archives
Repository of articles and publications dating back to 1997
Ad-free Reading
Uninterrupted reading experience with no advertisements


Seamless Access Across All Devices
Access Business Standard across devices — mobile, tablet, or PC, via web or app
