⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More

Cybersecurity never slows down. Every week brings new threats, new vulnerabilities, and new lessons for defenders. For security and IT teams, the challenge is not just keeping up with the news—it’s knowing which risks matter most right now. That’s what this digest is here for: a clear, simple...

⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More

Cybersecurity never slows down. Every week brings new threats, new vulnerabilities, and new lessons for defenders. For security and IT teams, the challenge is not just keeping up with the news—it's knowing which risks matter most right now. That's what this digest is here for: a clear, simple...

CVE-2025-57817: Missing Authorization

Fides is an open-source privacy engineering platform. Prior to version 2.69.1, the OAuth client creation and update endpoints of the Fides Webserver API do not properly authorize scope assignment. This allows highly privileged users with client:create or client:update permissions to escalate thei...

Salesloft Drift Breach Traced to GitHub Compromise and Stolen OAuth Tokens

Salesloft Drift breach traced to GitHub compromise and stolen OAuth tokens, Mandiant confirms breach contained and Salesforce data targeted...

SUSE CVE-2025-9636

pgAdmin = 9.7 is affected by a Cross-Origin Opener Policy COOP vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation...

Origin Validation Error

Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to Origin Validation Error via improper enforcement of cross-origin opener policy in the OAuth authentication process. An attacker can gain unauthorized access to user accounts, escalate privileges, or...

pgadmin4 is affected by a Cross-Origin Opener Policy (COOP) vulnerability

pgAdmin = 9.7 is affected by a Cross-Origin Opener Policy COOP vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation...

Malicious code in wavefunction-oauth-hadron-celeste (npm)

The package wavefunction-oauth-hadron-celeste was found to contain malicious code...

Malicious code in oauth-venus-nconf-supervisor (npm)

The package oauth-venus-nconf-supervisor was found to contain malicious code...

Malicious code in oauth-standard-umbra-antares (npm)

The package oauth-standard-umbra-antares was found to contain malicious code...

Malicious code in dotenv-parse-variables-oauth-pavo-meteor (npm)

The package dotenv-parse-variables-oauth-pavo-meteor was found to contain malicious code...

Malicious code in module-xenos-install-oauth (npm)

The package module-xenos-install-oauth was found to contain malicious code...

Malicious code in yildun-writable-mensa-oauth (npm)

The package yildun-writable-mensa-oauth was found to contain malicious code...

MAL-2025-46579 Malicious code in wavefunction-oauth-hadron-celeste (npm)

The package wavefunction-oauth-hadron-celeste was found to contain malicious code...

MAL-2025-46792 Malicious code in yildun-writable-mensa-oauth (npm)

The package yildun-writable-mensa-oauth was found to contain malicious code...

MAL-2025-45212 Malicious code in module-xenos-install-oauth (npm)

The package module-xenos-install-oauth was found to contain malicious code...

MAL-2025-45403 Malicious code in oauth-venus-nconf-supervisor (npm)

The package oauth-venus-nconf-supervisor was found to contain malicious code...

MAL-2025-45594 Malicious code in private-oauth-jsonp-geomorphology (npm)

The package private-oauth-jsonp-geomorphology was found to contain malicious code...

Security Bulletin: There is a vulnerability in kafka-clients-3.8.0.jar used by IBM Maximo Asset Management application (CVE-2025-27817,CVE-2025-27818)

Summary There is a vulnerability in kafka-clients-3.8.0.jar used by IBM Maximo Asset Management application CVE-2025-27817,CVE-2025-27818 Vulnerability Details CVEID:CVE-2025-27817 DESCRIPTION: A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apach...

CVE-2025-55739 api: Shared OAuth Signing Key Between Different Instances

api is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© PBX. In versions lower than 15.0.13, 16.0.2 through 16.0.14, 17.0.1 and 17.0.2, there is an identical OAuth private key used across multiple systems that installed the same FreePBX RPM or DEB package. An...