Tag: oauth-abuse

Critical VMware RCE Exploited, Major Breaches Hit LexisNexis and AkzoNobel

CISA confirmed active exploitation of a VMware Aria Operations RCE vulnerability, adding it to the KEV catalog. Major data breaches impacted LexisNexis and AkzoNobel, while threat actors continue leveraging OAuth flows and compromised infrastructure for attacks.