Cyber Security News for September 23 2026 - Daily DefSec Brief

Daily DefSec Brief · Sep 23, 2026 · 5m · transcript

1. F5 BIG-IP APM zero-day exploited for code execution https://my.f5.com/manage/s/article/K000162605

2. Check Point management servers exploited since July https://support.checkpoint.com/results/sk/sk1000171

3. Device-code phishing kit registered its own devices ra — https://www.microsoft.com/en-us/security/blog/2026/09/22/unmasking-eviltokens-getting-to-the-root-of-device-code-phishing/

4. Arista VeloCloud orchestrator zero-day exploited https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183

5. Check Point VPN certificate flaw now exploited…