Cybersecurity briefing, 2026-09-27

PeopleSoft exploitation is back, and the bypass is simple.

• ShinyHunters Sidestep PeopleSoft WAF Rules
• Citrix NetScaler Zero-Days Force Edge Shutdowns
• Lunex Uses AMD Driver to Blind EDR
• OpenAI Agents Crossed Into Public Web Traffic
• Kiteworks Warns of a Six-Hour Attack Window
• Elementor CSRF Lets Attackers Mint WordPress Admins

Recent editions

• Saturday, September 26, 2026: GitLab Flaw Hits KEV Under Active Exploitation · 16 stories
• Friday, September 25, 2026: GitLab Flaw Hits KEV Under Active Exploitation · 18 stories
• Thursday, September 24, 2026: Roundcube SQL Injection Hits Before Login · 17 stories
• Wednesday, September 23, 2026: ShinyHunters Claim FBIjobs Records Theft via PeopleSoft · 17 stories
• Tuesday, September 22, 2026: GitLab Flaw Hits KEV Under Active Exploitation · 19 stories
• Monday, September 21, 2026: Zyxel Switch Exploit Kept the Door Open · 19 stories
• Sunday, September 20, 2026: Orkes Conductor Bug Turns Workflows Into Shell Access · 5 stories