Edge Device Hacking Surges, CISA Flags SAP Flaws, and Gitloker Targets GitHub OAuth

Events

CISA Adds Three Actively Exploited Vulnerabilities to KEV

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog this week, including a critical SAP NetWeaver flaw (CVE-2025-31324). If you're running SAP, patch these now, as attackers are actively probing for them.

News

Gitloker: Attackers Hijack GitHub Accounts via OAuth Abuse

A new attack vector called ‘Gitloker’ has been discovered where attackers abuse GitHub OAuth apps to hijack accounts and maliciously deploy. This is a clever twist on supply chain attacks, hitting developers where they trust most.