Latest / Tech Talks With Kinsoft
Last Week in Tech - F5 and Check Point Under Fire, a $387 Million Spoofed Approval, and AI Agents Go Carding
Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!
Last Week in Tech for Monday 28 September 2026, covering the week from 21 September.
F5 BIG-IP APM zero-day (22 Sep). CVE-2026-94127, heap overflow enabling unauthenticated RCE. F5 scores it CVSS v3.1 9.8 and CVSS v4.0 9.3. Exploitable only where APM acts as an OAuth authorisation server with an access policy and OAuth profile on the same virtual server. Added to CISA KEV the same day, federal deadline 25 Sep. Hotfixes for 17.1.x, 17.5.x and 21.1.0, plus an iRule workaround via F5 Support…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.