Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logs

Week-in-review: Multiple high-impact security stories. WordPress 7.0.2 fixes one critical and one high-severity vulnerability (CVE-2026-60137 — facilitated SQL injection; CVE-2026-63030 — REST API batch-route confusion leading to RCE); administrators should patch immediately. New Spirals ransomware (written in Rust) rapidly moved from access to data theft and encryption in under 24 hours. Coca‑Cola’s Fairlife experienced a ransomware incident that halted US production. Attackers are spoofing OAuth client IDs to bypass sign-in logs and zero-day activity targeting SonicWall SMA appliances was in