A critical IDOR vulnerability (CVE-2025-27507) in ZITADEL’s Admin API exposes organizations to account takeover risks, allowing low-privilege users to manipulate sensitive settings. Rated 9.0/10 on the CVSS scale, attackers can reroute LDAP authentication, extract credentials, or deploy phishing. ZITADEL has released patches; organizations must upgrade and audit configurations to mitigate risks.

Liberty Twp. investigating cyber incident – Hamilton In-depth, Investigative News from Journal-News
Liberty Township is investigating a cyber incident that has raised concerns among local officials. The precise details of the breach remain unclear, but authorities are