Last Week in AppSec for 21. October 2025 - Checkmarx Access control bypasses in Python's Authlib (OAuth and OpenID) and Java's Spring Framework (CSRF protection failure), last week in AppSec

It's #LastWeekInAppSec time! Access control bypasses in #Python's #Authlib (#OAuth and #OpenID) and Java's #SpringFramework (#CSRF protection failure).

See buff.ly/ZUloV61 for deeper analysis, mitigation steps, etc.

#AppSec #VulnManagement #CyberSecurity #SupplyChainSecurity

MORES's co-investigator Péter Krekó has just published a paper with @authlibeu.bsky.social 🤝

His paper argues for rethinking propaganda & promoting digital literacy to counter disinformation. See below.

Stay tuned for Krekó’s upcoming papers with MORES and #AUTHLIB on #emotions & #illiberalism.

Russia’s Illiberal Networks: From Cross-Border Propaganda to Mutual Legitimation Register our discussion on Dec 2 exploring how Russia and radical right parties in the EU use the same narratives for mutual legitimization.

Interested in the techniques of mutual enforcement between the #Kremlin & European #illiberals?
Join our #AUTHLIB panel with #GMF's @Dorka Takacsy &
#CEU's Mikola Bálint @franziskawagner.bsky.social @shekhovtsov.bsky.social & yours truly.
📆December 2, 3:00 pm CET
RSVP👇
authlib.eu/russias-illi...