A Meta Muse zero-day let local processes hijack dictation and steal auth tokens on macOS. Patrick Wardle's PoC prompted an emergency Meta fix.

#MetaMuse #ZeroDay #macOS #PatrickWardle #AIagents #PromptInjection #CyberSecurity

iT4iNT SERVER F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers VDS VPS Cloud #F5 #CyberSecurity #ZeroDay #BigIP #APM

CRITICAL zero-day (CVE-2026-93952) impacts Arista VeloCloud Orchestrator (on-prem <5.2.3.16, <6.4.2.8). Remote attackers can exploit without credentials. Patch immediately. https://radar.offseq.com/threat/arista-urges-immediate-patching-of-exploited-vco-zero-day-0c28c2caa003025a #OffSeq #ZeroDay ...

Pre-auth zero-day CVE-2026-93616 in Check Point Management Server lets unauth script execution. Patch now. #ZeroDay #CheckPoint #CVE-2026-93616 #VPNSecurity #Firewall https://thedailytechfeed.com/check-point-management-server-zero-day-critical-cve-2026-93616-under-active-exploitation/

ShinyHunters claims FBI breach, agent/applicant data stolen — FBIjobs.gov defaced. #Cybersecurity #DataBreach #ShinyHunters #FBI #ZeroDay #IdentitySecurity https://thedailytechfeed.com/shinyhunters-claims-to-have-breached-fbi-stole-data-on-agents-applicants/

CVE-2026-94127 is a CRITICAL zero-day in F5 BIG-IP APM (OAuth Authorization Servers) with active RCE exploitation. Patch now or apply iRule mitigation. https://radar.offseq.com/threat/f5-patches-big-ip-apm-zero-day-flaw-exploited-in-rce-attacks-191545153729ae57 #OffSeq #F5 #ZeroDay

A #zeroday #vulnerability in #Meta’s #AIassistant, #Muse, allows any app or #terminalcommand to gain control of the assistant. This is due to design decisions that enable any app to change undocumented settings, including the endpoint for transcription, which can be exploited to gain access to the…

Critical zero-day in F5 BIG-IP OAuth server allows unauthenticated RCE. Patch now. #F5 #BIGIP #ZeroDay #OAuth #CyberSecurity #RCE https://thedailytechfeed.com/critical-zero-day-in-f5-big-ip-oauth-server-enables-rce/

Check Point disclosed CVE-2026-93616, a path traversal zero-day in Security Management Server web services used in targeted attacks, and released fixes plus hunting guidance. #CheckPoint #ZeroDay #VPN

I hope you don't mind @agreenberg.bsky.social but I suggested a follow up to @alexgibneyfilm.bsky.social #ZeroDay for your book #OperationSandWorm as a documentary.

Absolutely fascinating listen and it put all the pieces together I'd already learned so thank you :)

Meta’s #Muse AI assistant has been found to contain a serious zero-day vulnerability on macOS.

#Cybersecurity #AI #AIAgents #ApplicationSecurity #MacOS #ZeroDay #InformationSecurity #Privacy #ArtificialIntelligence

Read the full article:
www.malwarebytes.com/blog/bugs/20...

An exploited Check Point VPN vulnerability allows remote code execution. Patch this Check Point VPN vulnerability now to block active in-the-wild attacks.

#CheckPoint #CVE202685102 #VPN #Cybersecurity #Infosec #ZeroDay

New Windows Defender zero-day blocks Microsoft antivirus updates reconbee.com/new-windows-...

#windows #windowsdefender #zeroday #microsoft #antivirus #cyberattack

📢 [VULN] L'assistant IA Muse de Meta est-il une porte dérobée pour les malwares sur Mac ?

Une vulnérabilité de sécurité de type zero-day a été identifiée dans l'application de l'assistant IA Muse de Meta pour macOS.

#ZeroDay #Malware #Cyberveille

Critical: active exploitation of Zyxel switches, Chrome zero days, Cisco ISE, and weaponized developer supply chains.

Full Inferlume Report: inferlume.com/reports/dail...

#ThreatIntelligence #CyberSecurity #ZeroDay #VulnerabilityManagement #IncidentResponse #NetworkSecurity #InfoSec

📢 Zero-day critique dans Muse, l'assistant IA de Meta : prise de contrôle totale possible

L'article rapporte la découverte et la divulgation publique d'une vulnérabilité zero-day dans Muse, le nouvel assistant IA de Meta, par…

🟡 vérification factuelle moyenne
#ZeroDay #PatrickWardle #Cyberveille

Lookalike sites + zero-day chain = CLEANGULP compromise via Chrome/Windows flaws. #ZeroDay #Malware #Phishing #Windows #Chrome #Cybersecurity https://thedailytechfeed.com/phishing-attack-triggers-chrome-windows-zero-days-via-copied-sites/

CVE-2026-7273 in Zyxel GS1900 switches is being exploited—patch now or beware unauthorized control. #NetworkSecurity #Vulnerability #CVE2026 #Zyxel #CyberThreats #ZeroDay https://thedailytechfeed.com/cisa-alerts-critical-vulnerability-in-zyxel-gs1900-switches-under-active-attack/

Weekly Cybersecurity Newsletter Bulletin – Cisco and Android 0-Day, BragJack Attack, Claude Opus 5 Used to Hack OpenAI, and 20+ Stories

https://commons.now/link/weekly-cybersecurity-newsletter-bulletin-cisco-and-android-0-day-bragjack

#Android #Cisco #Openai #ZeroDay

CVE-2026-76460 (CVSS 10.0): unauth attackers skip login on Cisco ISE, reach root. Active exploitation confirmed. 2nd Cisco zero-day this week. Patch to 3.5p4/3.4p7/3.3p12/3.2p11/3.1p12 now.

🇬🇧 diesec.com/2026/09/cisc...
🇩🇪 diesec.com/de/2026/09/c...

#Cisco #CyberSecurity #ZeroDay