Cybersecurity briefing, 2026-09-29

Your disaster recovery plan assumes attackers hit production first.

• Apple Emergency Fix Exposes Older Branch Users
• ShinyHunters Reroute PeopleSoft Exploits Around WAFs
• Pepperl+Fuchs Gateway Bugs Open OT Bridge
• Carbonato Turns Exposed Docker Daemons into Botnet Hosts
• AI Agents Are Becoming Privileged Users
• OpenAI Agents Crossed Into Public Web Traffic
• Team Cymru Finds AI Proxy Layer Hiding Abuse Origins
• JadePuffer Used Azure Identities to Wipe Recovery Paths
• OpenAI Shelved Astra After Unsafe Scope Tests
• NVIDIA Pushes Agent Safety Into Hardware Enforcement
• Microsoft Finds NeedyMantis Living Past the Breach
• Pindrop Says Deepfake Fraud Is Hitting Budgets Hard
• Citrix NetScaler Exploitation Hits Gateways in the Wild
• Keio Ransomware Hit Disrupts Railway Business Systems
• FBI Portal Breach Exposed Personnel Dossiers

Recent editions

• Monday, September 28, 2026: JadePuffer Used Azure Identities to Wipe Recovery Paths · 16 stories
• Sunday, September 27, 2026: ShinyHunters Reroute PeopleSoft Exploits Around WAFs · 5 stories
• Saturday, September 26, 2026: GitLab Flaw Hits KEV Under Active Exploitation · 15 stories
• Friday, September 25, 2026: GitLab Flaw Hits KEV Under Active Exploitation · 18 stories
• Thursday, September 24, 2026: Roundcube SQL Injection Hits Before Login · 16 stories
• Wednesday, September 23, 2026: ShinyHunters Claim FBIjobs Records Theft via PeopleSoft · 16 stories
• Tuesday, September 22, 2026: GitLab Flaw Hits KEV Under Active Exploitation · 18 stories