TL;DR Attackers sent a convincing DocuSign notification with a "Review & Sign" button that chained through Google Maps redirects to an Amazon S3-hosted credential harvesting page. The redirect chain ...

Researchers have found that attackers are abusing OAuth to send users from legitimate Microsoft or Google login pages to phishing sites or malware downloads.

Whether you have one parked domain or thousands, it is better to enable these URLs to bounce to another site than to let them sit empty. After all, if you can turn these domains into a landing page or ...

OAuth redirection is being repurposed as a phishing delivery path. Trusted authentication flows are weaponized to move users from legitimate sign‑in pages to attacker‑controlled infrastructure.

VeriSign is facing a new class-action lawsuit over its controversial "Site Finder" service, which redirects all misspelled or unassigned .com domain names to a search page managed by the domain name ...

Earlier this week, the Internet Corporation for Assigned Names and Numbers (ICANN) published a draft of an “explanatory memorandum” for a proposed clause that prohibits the managers of new generic top ...