Cybersecurity briefing, 2026-09-09

Here's the reframe for today.

• FreeIPA Patch Leaves a Directory Backdoor Question
• F5 BIG-IP APM Intrusions Hide in PHP Memory
• NSA Alert Exposes Industrial AI Capability Theft
• MikroTik SSH Flaws Are Being Used for Router Takeover
• BigBear 2.0 Industrializes Microsoft 365 MFA Bypass
• BengalSEO Turns Bing Trust Into Malware Delivery
• Slim Spider Chases Cloud Credentials Into Pix Systems
• AI Agents Ran a Six-Hour Credential Heist
• AI Agents Keep Winning Through Ordinary Flaws
• Siemens Widens Patch Work Across OT Estates
• Jellyfin 12.0 Upgrade Can Break on Name Collisions
• France Arrests Suspected ZeroBytes Member
• CIA Cyber Work Helped Track Maduro
• ShipMonk Breach Broke Trezor's Deletion Assumption
• Liquid’s Elements Bug Paused L-BTC Redemptions
• ChatGPT’s Shared Trust Layer Leaks Across Accounts
• Forescout Shows AI Can Port PLC Exploits