ON THE CALENDAR
Happening today
Local five-day weatherOpen Settings to choose and remember your city.
WEATHER NOW
Weather details
CURATED RSS · UPDATED AUTOMATICALLY
Cybersecurity
The newest stories from reliable sources, without the noise.
242 stories
AI GENERATED
What matters right now
Generated
37 stories · 11 sources
Cybersecurity coverage centers on actively exploited zero-day vulnerabilities affecting F5 BIG-IP APM, Check Point management servers, Arista VCO, and Chrome, alongside alleged data theft from an FBI jobs site. Other developments include critical flaws in ManageEngine, WordPress, and Next.js; ransomware-related legal action; and emerging malware and identity-security threats.
Actively exploited vulnerabilities and urgent patching
Multiple reports describe exploitation or urgent remediation activity involving network-management products and browsers.
-
F5 patches BIG-IP APM zero-day enabling unauthenticated remote code execution
F5 has patched a critical BIG-IP APM vulnerability identified as CVE-2026-94127. Headlines describe the flaw as an unauthenticated remote-code-execution issue, exploited against OAuth servers and used in attacks.
-
Check Point patches exploited management-server zero-day
Check Point has patched a zero-day vulnerability in a management server that was being exploited, according to SecurityWeek.
-
Arista urges immediate patching of exploited VCO zero-day
Arista is urging customers to immediately patch an exploited zero-day affecting VCO.
-
Chrome addresses a large batch of vulnerabilities, including code-execution flaws
Chrome reportedly patched 108 vulnerabilities, including critical flaws that can enable code-execution attacks. Microsoft’s security listings separately identify multiple Chromium V8 issues involving type confusion, use-after-free, memory corruption, and a race condition.
-
Chinese hackers reportedly use a Chrome-Windows zero-day chain to deploy CLEANGULP
The Hacker News reports that Chinese hackers exploited a Chrome-Windows zero-day chain to deploy CLEANGULP malware.
Data breaches and threat-actor claims
ShinyHunters has made multiple claims about compromising an FBI-related site and stealing sensitive data, but the supplied headlines characterize the reports as claims or allegations.
-
ShinyHunters claims an FBI breach involving agents and job applicants
ShinyHunters claims it breached an FBI jobs site and stole data on agents and job applicants. One report says the group demanded a retraction of a threat report, while another says it claimed exposure of almost all agents.
Newly reported software and web-application flaws
Several single-source reports identify critical vulnerabilities that could enable unauthorized access or code execution.
-
ManageEngine flaw could provide SYSTEM access through the Windows login screen
A critical ManageEngine vulnerability reportedly allows attackers to gain SYSTEM access through the Windows login screen.
-
WordPress core vulnerability reportedly enables unauthenticated code execution
A critical WordPress core vulnerability reportedly lets attackers execute code without logging in.
-
Next.js ImageResponse flaw may enable server-side code execution
A critical Next.js ImageResponse vulnerability can reportedly lead to server code execution when a crafted SVG input is processed.
-
WordPress malware uses a hidden plugin and blockchain command-and-control
A reported WordPress malware campaign uses a hidden plugin and blockchain-based command-and-control infrastructure to remain undetected.
-
Rogue external MFA providers can steal passwords during logins
BleepingComputer reports that rogue external multifactor-authentication providers can steal passwords during login processes.
Malware, ransomware, and emerging attack surfaces
Reports highlight malware using AI-related techniques, risks associated with local computer-history data, and legal consequences for ransomware activity.
-
Malware reportedly queries AI models for operational guidance
A report describes malware that asks AI models what to do next instead of waiting for direct instructions from human hackers.
-
ChatGPT computer-history feature creates a potential macOS infostealer attack surface
A report says ChatGPT’s computer-history feature creates a new attack surface for macOS infostealers.
-
Ryuk ransomware member sentenced to 24 months
A reported Ryuk ransomware member was sentenced to 24 months in prison.
Policy, incident response, and security landscape
Additional reporting covers a proposed AI-cyber test program, a regulatory penalty following a major breach, and security monitoring topics involving Microsoft and network products.
-
Capitol Hill proposes an AI-cyber test program after water attacks
Following attacks on water-related targets, Capitol Hill is offering a proposal for an AI-cyber test program.
-
Sweden fines Miljödata $183,000 over a breach affecting 2.2 million
Sweden fined Miljödata $183,000 over a breach reported to have affected 2.2 million people.
-
SANS Stormcast highlights several zero-day and exploitation topics
SANS Stormcast coverage highlights GET requests with bodies, Check Point, VeloCloud, BIG-IP, and Microsoft Defender zero-days, as well as related security issues.
-
SANS reports on the Macfinger ClickFix campaign
SANS reported on a Macfinger ClickFix campaign.
-
Relays reportedly mask Chinese access to US frontier AI models
Dark Reading reports that relays are being used to mask Chinese access to frontier AI models in the United States.
Generated from RSS headlines collected by The Daily Read. Check the linked reporting for full context.
- New since your last visit Check Point Patches Exploited Management Server Zero-Day
- New since your last visit ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants
- New since your last visit I tested MICROSOFT’s secret tool that debloats WINDOWS 11 and makes you a power user
- New since your last visit Hackers Exploiting F5 BIG-IP OAuth Server 0-day Flaw to Gain Remote Code Execution
- New since your last visit ShinyHunters Allegedly Claims Breach of FBI Jobs Site and Stolen Agents’ Data
- New since your last visit ISC Stormcast For Wednesday, September 23rd, 2026 https://isc.sans.edu/podcastdetail/10106, (Wed, Sep 23rd)
- New since your last visit SANS Stormcast Wednesday, September 23rd, 2026: GET with Body; Checkpoint, VeloCloud, BigIP and MICROSOFT DEFENDER...
- New since your last visit Macfinger ClickFix campaign, (Tue, Sep 22nd)
- New since your last visit ShinyHunters claims attack on FBI exposes almost all agents
- New since your last visit Rogue external MFA providers can steal passwords during logins
- New since your last visit Sweden fines Miljödata $183,000 over breach affecting 2.2 million
- New since your last visit After water attacks, Capitol Hill offers its own proposal for an AI-cyber test program
- New since your last visit Relays Are Masking Chinese Access to Frontier AI Models in the US
- New since your last visit How the CISO-CMO Alliance Builds Trust Before Crisis Strikes
- New since your last visit Chinese hackers exploit WordPress, Zyxel flaws to steal govt data
- New since your last visit Chinese hackers exploit multiple technologies to steal govt data
- New since your last visit MICROSOFT Disrupts EvilTokens Device Code Phishing Service
- New since your last visit Deception by Design: CISA's Guide to Tricking Cybercriminals
- New since your last visit WINDOWS 11 KB5124010 is out with major changes, direct download links for offline installer (.msu)
- New since your last visit ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach
- New since your last visit The Truth about GET and HTTP Standards, (Tue, Sep 22nd)
- New since your last visit Volexity spots another China-aligned threat group exploiting Chrome and MICROSOFT defects
- New since your last visit Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
- New since your last visit New ClosedQuorum WINDOWS malware uses AI for attack decisions
DATES WORTH WATCHING
Upcoming events
AI-assisted extraction from linked RSS headlines
KEEP EXPLORING
Community picks
Go beyond the headlines with voices from the community.