This episode reports on an Oauth misconfiguration at Booking.com, data breaches at US universities, security updates for Cisco IP phones and more