Social login flaw redirects users to malicious sites
A major new vulnerability affecting websites that allow people to login using their social media accounts has been discovered. The flaw exists in widely-used open-source systems like OpenID and OAuth 2.0, and works by…