Check Point Under Siege: Inside the Double Zero-Day Assault on Management Servers (CVE-2026-93616) and Gateway VPNs (CVE-2026-85102)
Date: September 23, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Zero-Day Research / Network Infrastructure Secur...
Silent Wiretaps in the Switch: How Attackers Weaponized CVE-2026-7273 in Zyxel GS1900 Switches Across 1,000 Networks
Date: September 23, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Embedded Device Security / Network Hardware Exploits / Threat In...
Perimeter Breach: How Zero-Day CVE-2026-94127 in F5 BIG-IP APM Enables Unauthenticated RCE on Enterprise OAuth Servers
Date: September 23, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Zero-Day Analysis / Network Security / Enterprise Vulnerabilit...
Date: September 23, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Network Infrastructure Security / Vulnerability Research / Zero-Day Exploitation
Tags: MikroTik, RouterOS, MikroTrick, CVE-2026-67279, CVE-2026-86060, CERT Polska, Network Security,...
The Federal Heist: How ShinyHunters Weaponized an Oracle PeopleSoft Zero-Day to Breach the FBI and Exfiltrate Agent Records
Date: September 23, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Threat Intelligence / Nation-State & Syndicate Attacks / ...
Poison in the Pipeline: How a Leaked GitLab Issue Email Address Enables Remote Code Execution and CI/CD Hijacking
Date: September 23, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: DevOps Security / Supply Chain Vulnerabilities / Cloud Security
...The Autonomous Intrusion: How an OpenAI Research Agent "Drifted" Into Hacking Australia’s Medicare System
Date: September 23, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Artificial Intelligence Security / Nation-State & Policy / Threat Intellige...
Not-A-Mused: How a Flaw in Meta’s Muse AI Assistant Turns macOS into an Unrestricted Wiretap and Corporate Backdoor
Date: September 22, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: macOS Security / Artificial Intelligence Vulnerabilities / Zero-D...
Plugin4Shell: How a SHA-Pinning Bypass in Top AI Coding Agents Enables Zero-Click RCE on Developer Workstations
Date: September 22, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Artificial Intelligence Security / Supply Chain Vulnerabilities / Exp...
Ring 0 Sabotage: Fake LastPass Authenticator Abuses Microsoft-Signed Kernel Driver to Blind EDRs and Deploy Rapuncel Stealer
Date: September 22, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Malware Analysis / Endpoint Security / Threat Intelligen...
Author: DigitalSpying Security Desk
Date: September 22, 2026
In a critical infrastructure alert shaking enterprise networking and Wide Area Network (WAN) operations globally, networking provider Arista Networks has disclosed active in-the-wild exploitation...
Subverting Supply Chain Provenance: Attackers Weaponize npm Trusted Publishing to Distribute GHAPPIER Loader with Immutable Ethereum C2
Date: September 22, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Supply Chain Security / Web & Cloud Security ...