Account takeover of Facebook/Oculus accounts due to First-Party access_token stealing – Youssef Sammouda

http://ysamm.com/?p=777

https://twitter.com/home/status/1619685003478319105

https://twitter.com/home/status/1619763333254754304

https://twitter.com/home/status/1619814812795699206