Newsroom

Cybersecurity news, advisories and updates

Threat advisories, regulatory changes in the Kingdom, short briefs on what matters this week, and news from our firm — each written for decision makers, with what to do next.

Showing 1 #SSRF Remove

Threat advisoriesCritical

SAP patches maximum-severity OAuth2 credential theft flaw in Cloud SDK for Python

SAP has patched CVE-2026-89111, a maximum-severity OAuth2 SSRF vulnerability in its Cloud SDK for Python that allows remote attackers to steal credentials from multi-tenant BTP applications.

19 Oct 2026 1 min read 32 viewsBleepingComputer

Trust

Built around the regulators you answer to

SAMA

Saudi Central BankCSF · BCM · CRFR

NCA

National Cybersecurity AuthorityECC-2:2024 · CSCC · CCC

SDAIA

Saudi Data & AI AuthorityPDPL

CMA

Capital Market AuthorityCSG

CST

Communications, Space & Technology CommissionCRF

14regulatory frameworks

Ready to talk about your compliance?

Tell us where you stand. We will show you the shortest path to what your regulator expects.

Book a consultation Explore our services

Cybersecurity news, advisories and updates

SAP patches maximum-severity OAuth2 credential theft flaw in Cloud SDK for Python

Built around the regulators you answer to

Ready to talk about your compliance?

Regulatory updates in your inbox