Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logs

This weekly security roundup compiles recent high-impact events and research across the threat landscape, including active zero-days and exploited vulnerabilities (SonicWall, Microsoft Patch Tuesday items), ransomware incidents that disrupted production (Fairlife/Coca-Cola) and rapidly-deployed strains (Spirals), new malware and infostealers (CrashStealer, LabubaRAT), large-scale cybercrime takedowns and fraud operations, and evolving attacker techniques (fake OAuth client IDs, prompt-injection/AI agent abuse, social engineering trends). It also highlights defensive and policy developments such as security updates, passkey rollouts, and third‑party risk management innovations.