OAuth Flaw in Airline Travel Service Exposes Millions to Account Hijacking Risks

Cybersecurity experts have identified a critical OAuth redirect flaw in a popular airline travel service that has exposed millions of users to potential account hijacking. This vulnerability allows attackers to impersonate victims, make travel bookings, and utilize loyalty points with just a simple click. The incident highlights ongoing risks in the API supply chain and raises concerns about the security measures in place for airline users. The flaw was reported by multiple sources, including The Hacker News and darkreading, emphasizing the need for enhanced cybersecurity practices in the travel industry.