Week in review: Weaponized OAuth redirection logic delivers malware, Patch Tuesday forecast

This Help Net Security weekly roundup compiles numerous cybersecurity items from the week, covering critical vulnerabilities and active exploits (e.g., IceWarp CVE-2025-14500, FreeScout CVE-2026-28289, Cisco SD‑WAN flaws), Iran‑linked APT activity targeting US sectors, exploit kits (Coruna), phishing campaigns abusing OAuth and 2FA bypass services, large-scale cybercrime takedowns (LeakBase, Tycoon), and broader trends in AI agent security, supply‑chain and identity risk.