Skip to main content
The Wire
FILEDWeekly Cybersecurity Recap: Atlassian Exploits, Helpdesk Zero-Days, Rogue Certificates and ShinyHunters Arrests CRITICALHackers Begin Exploiting Critical Atlassian Data Center Flaw Within Hours of Disclosure CRITICALAnthropic Expands Claude Access for Cybersecurity Teams After Discovering 129,000 Software Vulnerabilities FILEDOver 100 Compromised Websites Spread LunexStealer Through Fake Cloudflare Verification Pages CRITICALEY Data Breach Exposes Sensitive Information of Goldman Sachs and Man Group Clients CRITICALLibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Execute Code Without Macro Warnings FILEDWikimedia Says ‘Rogue’ OpenAI Agents Tried to Exploit Tools and Generated Millions of Requests FILEDGoogle Pauses Open-Source Product Bug Bounties After Surge in Invalid Automated Reports FILEDWeekly Cybersecurity Recap: Atlassian Exploits, Helpdesk Zero-Days, Rogue Certificates and ShinyHunters Arrests CRITICALHackers Begin Exploiting Critical Atlassian Data Center Flaw Within Hours of Disclosure CRITICALAnthropic Expands Claude Access for Cybersecurity Teams After Discovering 129,000 Software Vulnerabilities FILEDOver 100 Compromised Websites Spread LunexStealer Through Fake Cloudflare Verification Pages CRITICALEY Data Breach Exposes Sensitive Information of Goldman Sachs and Man Group Clients CRITICALLibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Execute Code Without Macro Warnings FILEDWikimedia Says ‘Rogue’ OpenAI Agents Tried to Exploit Tools and Generated Millions of Requests FILEDGoogle Pauses Open-Source Product Bug Bounties After Surge in Invalid Automated Reports
CyberNews by Zentrya One

Latest reports

Page 11 of 14
Malware

Infostealer Logs Reveal Stolen AI Session Tokens Capable of Bypassing MFA

Cybercriminals are increasingly targeting artificial intelligence accounts by stealing browser session tokens and API credentials from infected devices. These stolen artifacts may allow attackers to access AI services without entering a username, password, or multi-factor authentication (MFA) code.

Zentrya One Desk 10 Sept 2026 8 min read
critical CVE-2026-82533 Vulnerabilities

A Sandboxed AI Agent Could Switch Off Its Own Sandbox — and DeepSeek Harness Trusted It

CVE-2026-82533 carries a 9.4 severity score, and the mechanism is almost embarrassingly simple: the harness decided who to trust by reading a header the caller writes itself. Three weeks before the CVE landed, a developer had already posted a working reproduction on DeepSeek's own discussion board.

Zentrya One Desk 10 Sept 2026 7 min read
critical CVE-2025-53521 Malware

F5 BIG-IP APM Malware Hides Web Shell in Apache Memory to Evade Disk Scans

Security researchers have uncovered a sophisticated malware implant targeting F5 BIG-IP Access Policy Manager (APM) appliances that can conceal a PHP web shell entirely within Apache process memory, allowing attackers to maintain server-side code execution while leaving the targeted PHP files on disk unchanged.

Zentrya One Desk 09 Sept 2026 9 min read
critical CVE-2026-44756 Vulnerabilities

SAP Fixes CVSS 10.0 OVERPASS Flaw Allowing Unauthenticated Remote Code Execution

SAP has released its September 2026 security updates, addressing multiple vulnerabilities across its enterprise software portfolio, including a maximum-severity flaw in the SAP Kernel that could allow unauthenticated attackers to remotely execute operating-system commands.

Zentrya One Desk 09 Sept 2026 9 min read
The Daily Brief

Stay informed. Stay prepared. Stay one step ahead.

One brief each morning: the advisories that matter, the noise removed.

Double opt-in. One-click unsubscribe in every email. We never sell addresses.