CyberNews A Critical BIG-IP APM Zero-Day Flaw Has Been Exploited in Remote Code Execution Attacks F5, a leading cybersecurity company, has released urgent security updates to address a critical vulnerability in its BIG-IP Access Policy Manager (APM) solution. The zero-day flaw, tracked as CVE-2026-94127, allows attackers to execute remote code, putting thousands of organizations at risk. … Read more
A Shadowy Group Claims to Have Breached FBI Systems, Exposing Data on Agents and Job Applicants ShinyHunters, a notorious threat actor group known for selling stolen data on the dark web, has made a shocking claim: they’ve breached FBI systems, compromising sensitive information about federal agents and job applicants. According to reports, ShinyHunters claims to … Read more
Critical Next.js Bug Exposes Servers to Remote Code Execution via Malicious SVG Input A severe vulnerability in the popular Next.js framework has been discovered, allowing attackers to execute arbitrary code on servers hosting applications that use its ImageResponse feature. The flaw, which can be exploited by submitting specially crafted SVG input, puts thousands of websites … Read more
A sprawling network of intermediary servers has been found to be enabling users in China to access cutting-edge AI models in the US without revealing their identities or location. More than 80,000 “relay” servers, discovered by cybersecurity firm Team Cymru, are allowing operators to pool credentials for multiple AI accounts and route user requests through … Read more
D-Link Warns of High-Risk Vulnerabilities in DIR-822A Routers, Urges Customers to Take Immediate Action D-Link has issued a critical warning about two serious security flaws affecting its legacy DIR-822A dual-band Wi-Fi routers. The vulnerabilities, discovered by a security researcher who has published proof-of-concept exploit code, can be exploited remotely without any authentication or user interaction. … Read more
F5 has released urgent security updates to fix a critical zero-day vulnerability in its BIG-IP APM (Access Policy Manager) solution, which is being actively exploited in remote code execution attacks. The flaw, tracked as CVE-2026-94127, affects instances configured as an OAuth Authorization Server, allowing attackers to execute malicious code and potentially gain unauthorized access to … Read more
A Group of Hackers Claims to Have Breached the FBI’s Systems, Exposing Personal Data on Agents and Job Applicants A disturbing revelation has emerged in the cybersecurity world as ShinyHunters, a group known for its identity theft activities, claims to have breached the Federal Bureau of Investigation (FBI) systems. According to reports, the hackers claim … Read more
A Critical Flaw in Next.js ImageResponse Exposes Servers to Code Execution via Malicious SVG Input Cybersecurity researchers have discovered a critical vulnerability in the popular React-based web framework, Next.js. The flaw, found in the ImageResponse feature, can be exploited by attackers to execute server-side code and gain unauthorized access to sensitive data. The issue affects … Read more
Cybersecurity Agency Warns of Widespread Exploitation of Zyxel Flaw, Orders Federal Agencies to Patch The US Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm on a high-severity vulnerability in Zyxel GS1900 series switches that is being actively exploited by attackers. CISA has added the flaw, tracked as CVE-2026-7273, to its Known Exploited Vulnerabilities … Read more
In a worrying development, cybersecurity researcher Abdelhamid Naceri has released yet another zero-day exploit targeting Microsoft’s Windows Defender antivirus software. The new exploit, dubbed “BigDiskBuster”, blocks Windows Defender updates on all supported Windows versions, leaving users vulnerable to malware attacks. Naceri, who claims to be a former Microsoft employee and has been involved in an … Read more