Hackers use stolen OAuth access tokens to breach dozens of organization’s internal systems

Source description — as published

Organizations using tools like Heroku and Travis that generate OAuth user tokens should evaluate the security risks raised by those tools.