Author: NCIJ NETWNCIJ NETWORK

Swati KhandelwalSep 23, 2026Vulnerability / Network Security Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager (APM) that lets them run code on a BIG-IP system without logging in, F5 says. The flaw, CVE-2026-94127, affects only systems in which APM serves as an OAuth authorization server, issuing access tokens to applications. F5 disclosed it in an advisory on September 22 and has released engineering hotfixes. APM is the BIG-IP module that controls how users reach an organization’s applications and networks. The vulnerable setup has an APM access policy and an OAuth authorization server profile on the same…

In brief The Department of Justice filed a civil forfeiture complaint on July 15 targeting $84.2 million in accounts tied to Capstone Ltd., a payments firm prosecutors say moved money for Tether without the required license. The bulk of the money, $79.11 million, sat in a Wells Fargo Securities account; smaller sums were held at JPMorgan Chase and in two USDT wallets. Tether confirmed EQIBank, the Dominica-based bank behind Capstone, processed its wire transfers, but said it had “no knowledge” of the conduct under investigation and put its exposure at less than 0.034% of group assets. The US Department of…

The Republic of San Marino became the 76th signatory to the Artemis Accords during a ceremony in the city of Rimini on Friday with NASA and U.S. Department of State officials present.   “San Marino joins a growing coalition of like-minded nations committed to the peaceful, transparent, and responsible exploration of space,” said NASA Deputy Administrator Matt Anderson. “President Trump has directed NASA to build a Moon Base and establish an enduring presence on the lunar surface. As we do, we are putting the principles of the Accords into practice. NASA has invited every Artemis Accords signatory to participate in our return…

This week’s United Nations General Assembly in New York featured pleas for urgent action on climate change, with heads of state and Secretary-General António Guterres warning that the window for action is narrowing. Yet climate was a footnote amid the issues commanding public attention, including President Donald Trump’s talk of annihilating Iran, the walkout that preceded Israeli Prime Minister Benjamin Netanyahu’s speech and growing concerns about the rapid rise of artificial intelligence. This dynamic is familiar, with the UN trying to lead on climate change and build consensus among a fractious membership, even as wars and other crises complicate efforts…

Gaby Hinsliff (Britain needs cash and everyone knows we should break the pensions triple lock. Where is the courage?, 22 September) is right that public policy should not subsidise wealth without limit, but breaking the triple lock is a poor way to target affluent pensioners. Most pensioners are not affluent. Indeed, a quarter of pensioners require benefits in addition to the state pension just to survive and keep a roof over their heads.If the aim is to stop subsidising wealth, a more direct target is the generous tax treatment of private pension savings. A taxpayer contributing £100 to a pension…

Earlier this week Trump announced that the proposed “Triumphal Arch” would double as a complex to store military equipment, complete with the ability to deploy snipers and drones from the roof and plaza.In a letter to the Pentagon and Federal Aviation Administration (FAA), Duckworth said they “must reject this foolhardy plan and instead focus on increasing the safety of the airspace”.The arch is to be built just outside Arlington National Cemetery in Virginia, and about 4mi (6km) from Ronald Reagan Washington National Airport, the site of the deadly 2025 midair crash between a military helicopter and commercial plane. “The American…

OpenAI said Friday it had alerted “dozens” of global institutions that their websites may have been impacted by its AI agents acting improperly.OpenAI agents attempted to get information from “governments, universities, public agencies, and other institutions” through sometimes extreme means, the company said.While some of the activity was simply due to the tools working to find “authoritative sources of public information,” some went beyond that. Like an AI agent taking and transferring data when it should not have, OpenAI said.Such activity resulted in at least 53 incidents where an OpenAI agent took an image from ChatGPT user activity and transferred…

Ravie LakshmananSep 24, 2026Vulnerability / Web Security Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could allow an unauthenticated attacker to obtain remote code execution (RCE). “An unauthenticated attacker can make get_page_template() page-template resolution include a chosen readable local .php file outside the active theme directories,” WordPress said in an advisory released two days ago. “If relevant preconditions for both the server environment and the active theme are met, this can lead to RCE.” Successful exploitation hinges on meeting the…

Her crypto work included a wide range of policy statements and guidance that clarified the agency’s position on various aspects of the industry, including mining, staking, memcoins and — most importantly — a series of definitions for classifying different types of crypto assets and which regulator would have dominion. More recently, the agency began proposing formal rules, beginning with one known as Regulation Crypto Assets, which set up a system for offering crypto assets without triggering stringent securities regulations.The agency’s biggest splash, though, may have been its recent opening of the pathway for tokenizing securities. The effort known as the…

A faint ribbon of stars can be seen stretching across the galaxy in the image above. Known as a globular cluster stellar stream, this type of structure preserves clues about its past motion and evolution. By studying these streams, astronomers can learn more about how galaxies developed and how dark matter is distributed within them. Because these stellar streams respond to gravity, they can act as tracers of dark matter that cannot be seen directly. Until recently, their extreme faintness made them very difficult to detect and analyze. Improvements in massive astronomical datasets and advanced analysis methods are now turning…