CRITICAL PKCE DOWNGRADE VULNERABILITY: How Banking Apps’ OAuth Misconfigurations Enable Account Takeover + Video
Introduction: Proof Key for Code Exchange (PKCE, pronounced “pixie”) was designed to secure OAuth 2.0 authorization codes in public clients […]









