Attack on Google OAuth using abandoned domains

Google OAuth: abandoned domains attack

A vulnerability in Google OAuth allows attackers to access accounts of defunct organizations through abandoned domains.