ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack

Security Affairs reports multiple September 2026 cybersecurity developments, including alleged breaches, phishing and infostealer campaigns, actively exploited vulnerabilities, public proof-of-concept exploits, and regulatory enforcement. High-priority items include an unauthenticated WordPress local file inclusion vulnerability enabling remote code execution (CVE-2026-87902), an actively exploited unauthenticated Check Point Security Management Server path traversal flaw allowing script upload and execution (CVE-2026-93616), and a CISA KEV-listed Zyxel switch buffer overflow (CVE-2026-7273).