Tag #Oauth

What specific actions can Google take to immediately mitigate the risk of unauthorized access to sensitive user data via the exploited OAuth vulnerability?

A security vulnerability in Google's OAuth authentication allows attackers to access sensitive data from potentially millions of accounts by purchasing defunct company domains and recreating email accounts for former employees. This grants access to various services, including those with HR data like tax documents and social security numbers.