OAuth

Everything Packet Tribune has reported about OAuth: 2 stories, newest first. Part of our Vulnerabilities coverage.

OAuth vs API Key: When to Use Tokens and When to Use Secrets

OAuth tokens are ephemeral access passes that expire, while API keys are static identities that persist until manually revoked, creating distinct risk profiles for your infrastructure.

Oct 13, 2026

Vulnerabilities

Grav Login OAuth flaw exposes predictable credentials for unauthenticated access

Before version 1.4.3, the plugin sets unsalted MD5 passwords and deterministic usernames, enabling credential guessing attacks.

Oct 12, 2026