Cybersecurity briefing, 2026-09-10

Here is a thought for your morning: when the implant lives in the runtime, a file hash sweep can clear a box that is still owned.

• F5 BIG-IP APM Intrusions Hide in PHP Memory
• US Agencies Map Industrial AI Capability Theft
• Teams Redirects Hide Phishing Pages in Browser Sessions
• Tenable and AWS Expose the AI Review Gap
• Xinbi Guarantee’s Escrow Layer Gets Seized
• SAP Patch Wave Exposes Shared Trust Paths
• MikroTik SSH Flaws Are Being Used for Router Takeover
• AdaptHealth Breach Exposes 4.1 Million Records
• cPanel Flaw Leaps From Mail Privileges to Root
• Microsoft Says Passkey Lures Now Keep Cloud Access Alive
• Fortinet’s Fixes Expose a Server-Client Trust Gap
• Plex Leaves Thousands Exposed to Old Bugs
• WeChat Worm Used Trusted Calls to Jump Accounts
• DeepSeek Harness Sandbox Could Be Switched Off Locally
• ClickFix Persists Inside Browser Sessions
• Six Browser Extensions Steal Trading Session Tokens
• Veradigm Vendor Breach Spreads Beyond One Client