I've said it before and I'll keep saying it. In fact, I said it earlier today to a client:
"Every time a company implements #SSO, the devil buys a round for the house."
In particular, today's problem is Twitter. If you use #Twitter to sign into any other service/account, re-do your sign-in method now.
Screenshot is from the #ZDNET article.

https://www-zdnet-com.cdn.ampproject.org/c/s/www.zdnet.com/google-amp/article/stop-using-twitter-to-log-in-to-other-websites/