In Brief: In the hot seat at Hotjar as vulnerabilities there and at Business Insider were found
This from having combined XSS with OAuth which led to severe breaches. This could impact millions of websites, including at major brands, including Adobe, Microsoft and T-Mobile.