Cybersecurity briefing, 2026-09-09

Here's the reframe for today.

• F5 BIG-IP APM intrusions hide in PHP memory
• UAC-0099 tries to blind AI malware review
• Six browser extensions steal trading session tokens
• FreeIPA patch leaves a directory backdoor question
• Unbound patch shifts priority to DNS resolvers
• Artifactory chaining gave attackers admin backdoors
• Treasury sanctions push Xinbi toward freeze risk
• AdaptHealth breach exposes 4.1 million records
• Acronis Backup flaw reaches host-level risk
• LoadMaster auth bug ends in root control
• Plex leaves thousands exposed to old bugs
• Liquid’s Elements bug paused L-BTC redemptions
• GTIG sees AI theft turning into operations
• US agencies map industrial AI capability theft
• Alby Hub’s exposure, not just version, decides risk
• Lawmakers push BellTroX toward export controls

Recent editions

• Tuesday, September 8, 2026: Microsoft's 974-fix update includes two exploited Windows flaws · 16 stories
• Monday, September 7, 2026: N-central Hotfix 4 supersedes yesterday’s patch · 18 stories
• Sunday, September 6, 2026: TeamCity breach reached JetBrains Cadence backup · 6 stories
• Saturday, September 5, 2026: UTA0565 broadens Chrome zero-day delivery · 16 stories
• Friday, September 4, 2026: Microsoft sees Unicode smuggling in phishing campaign · 17 stories
• Thursday, September 3, 2026: Citrix NetScaler Gateway flaw hits KEV list · 18 stories
• Wednesday, September 2, 2026: Virtualizor update hijack puts VPS hosts at risk · 17 stories