OneLogin Bug Let Attackers Use API Keys to Steal OIDC Secrets and Impersonate AppsThe Hacker News·Oct 1, 16:43 UTC · Oct 1, 2025Exploit / PoC in the wildCVE-2025-5936360