Archive snapshot

Wed, Sep 23 · 06:00 AM CDT

Archived briefing content rendered inside the ACSP site experience.

Archived briefing

Snapshot overview

Generated Wed, Sep 23 · 06:00 AM CDTWindow last 6 hours

Top line

Coverage now updates on a rolling 6-hour window, while NVD entries come from the live API using a last-24-hours modified window and are sorted by severity.

Fast take

News stays on the current 6-hour slice, videos now use the last 24 hours, and NVD uses the API instead of the traditional feed to better match the live site behavior.

Top stories
5
Worth skimming
5
Tracked videos
1
NVD vulnerabilities
25

Top stories

Wed, 23 Sep 2026 13:59:48 +0530

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

9.8/10 · Must read/watch
The Hacker Newsvulnpolicyidentity

Summary
Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager (APM) that lets them run code on a BIG-IP system without logging in, F5 says. The flaw, CVE-2026-94127, affects only systems in which APM serves as an OAuth authorization server,

Wed, 23 Sep 2026 13:59:24 +0530

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

9.8/10 · Must read/watch
The Hacker Newsvulnmalwareai

Summary
A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites. The attacks, detected on September 3 and 4, 2026, involved the chaining of two vulner

Wed, 23 Sep 2026 11:00:09 +0530

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

9.8/10 · Must read/watch
The Hacker Newsaipolicy

Summary
The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S. Federal Bureau of Investigation and stolen data belonging to current and former employees at the agency. "We have compromised the FBI. We hold very sensitive data on al

Wed, Sep 23 · 06:00 AM CDT

ShinyHunters Claims FBI Hack Via PeopleSoft Zero Day

8.7/10 · Worth your time
Infosecurity Magazineai

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Wed, Sep 23 · 06:00 AM CDT

EU Auditors Warn Information-Sharing Gaps Are Hindering Cyber Incident Response

8.2/10 · Worth your time
Infosecurity Magazinegeneral

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Worth skimming

Wed, 23 Sep 2026 12:34:40 +0530

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

8.1/10 · Worth your time
The Hacker Newsvulnai

Summary
A new security vulnerability in Next.js could allow attackers to run code on a server via ImageResponse, the feature that generates Open Graph and other social preview images, Vercel said. The risk applies when an app puts values an attacker controls, suc

Wed, Sep 23 · 05:00 AM CDT

What Is an AI Software Factory? Lessons from 3 Client Deployments

8.1/10 · Worth your time
Hacker Newsai

Summary
Surfaced from Hacker News front page during collection run. Freshness on HN: 1 hour ago.

Wed, Sep 23 · 06:00 AM CDT

Attackers Abuse npm Trusted Publishing in GHAPPIER Campaign

8.0/10 · Worth your time
Infosecurity Magazinesupply-chainai

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Wed, Sep 23 · 06:00 AM CDT

ShinyHunters Claim Hack of Rival Ransomware Gang Clop

8.0/10 · Worth your time
Infosecurity Magazinemalwareai

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Wed, Sep 23 · 06:00 AM CDT

CISOs Must Update Incident Response Playbooks for Multimodal Deepfakes, Gartner Warns

7.7/10 · Worth your time
Infosecurity Magazinegeneral

Summary
Collected from the Infosecurity Magazine news page during the latest run.