Hackers Exploiting F5 BIG-IP OAuth Server 0-day Flaw to Gain Remote Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

F5 has warned that hackers are actively exploiting a critical zero-day vulnerability in BIG-IP Access Policy Manager (APM) deployments to execute code remotely without authentication. Tracked as CVE-2026-94127, the flaw affects virtual servers configured with both an APM access policy …

ShinyHunters Allegedly Claims Breach of FBI Jobs Site and Stolen Agents’ Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI is investigating alleged unauthorized activity affecting its recruitment infrastructure after the ShinyHunters cybercrime group claimed it breached FBI systems, defaced the bureau’s jobs portal, and stole sensitive records belonging to employees and applicants. The incident places the data-extortion …

Check Point Management Server 0-Day Vulnerability Actively Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Check Point has warned customers that attackers are exploiting a critical zero-day vulnerability in its Security Management infrastructure. Tracked as CVE-2026-93616, the flaw carries a CVSS score of 9.8 and enables an unauthenticated remote attacker to upload and execute arbitrary …

Aembit Launches Support for Okta Cross App Access, Extending Enterprise Identity Controls to AI Agents

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Silver Spring, Maryland, USA, September 22nd, 2026, CyberNewswire Aembit, the identity and access management (IAM) company for AI agents, today announced support for Cross App Access (XAA), an open protocol introduced by Okta that lets a user’s existing enterprise identity …

Scaling SOC Capabilities: How Threat Intelligence Cuts Triage Time and Burnout 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A suspicious IP, unfamiliar domain, or file hash can trigger an investigation in seconds. Understanding what that indicator means can take much longer.  An IOC rarely tells the full story. Analysts may need to determine what threat it is associated …

Autonomous AI Agents Hack Retailers for $25 and Steal 600,000 Credit Cards

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A financially motivated operator has been running three open-source AI tools against many online retailers, mostly without supervision. The results are shocking: over 600,000 credit card records have been stolen, scripts to gather card information have been placed on dozens …

A New Tool for Tracking AI Malware Uncovers Malware That Operates Without Human Control

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco Talos has released CAIRN, an open-source toolkit designed to hunt, classify, and track AI-integrated malware by examining the digital markers developers leave behind. The Cognitive Artifact Intelligence Research Network searches for prompt templates, provider endpoints, API-key prefixes, jailbreak terms, …

Microsoft SharePoint Flaw Lets Attackers Execute Code Remotely With Low Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has confirmed a high-severity remote code execution vulnerability in on-premises SharePoint Server that lets an authenticated, low-privileged attacker run arbitrary code over a network without user interaction. Tracked as CVE-2026-65660, the code-injection flaw carries a CVSS score of 8.8 …

New TASK#STOMP Backdoor Uses PowerShell to Steal Documents and Wi-Fi Passwords

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TASK#STOMP is a newly analyzed Windows backdoor that turns ordinary built-in tools into a durable spying operation. It uses a Visual Basic Script installer, hidden PowerShell, scheduled tasks, and runtime code compilation to collect business documents, saved Wi-Fi passwords, clipboard …

Linux KVM/arm64 Vulnerability Lets Attackers Escape Virtual Machines and Gain Host Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly disclosed Linux kernel vulnerability, tracked as CVE-2026-89775, could let attackers escape an ARM64 virtual machine and access the underlying host system. The issue affects KVM/arm64 environments where nested virtualization is enabled, creating a serious risk for multi-tenant cloud …