Google researchers say the hackers abused a third-party tool in an attack spree designed to harvest credentials.

Google announced it will add additional security checks to log-in attempts from applications or devices that do not support OAuth 2.0.

Google advises developers to update their apps to use OAuth 2.0 as a connection method to maintain G Suite account compatibility and provides help on how to use OAuth 2.0 to access Google APIs.

A weakness in Google's OAuth "Sign in with Google" feature could enable attackers that register domains of defunct startups to access sensitive data of former employee accounts linked to various ...

This Google’s OAuth flaw that could allow attackers to inherit credentials from old accounts of former failed startups employees.

Google has stopped Wednesday’s clever email phishing scheme, but the attack may very well make a comeback.