Iran blocks VPNs outside their country, Facebook OAuth Tokens are hacked again, and Microsoft patches a gaping physical access vulnerability. All that and more, this time on Threat Wire.