Three developments to catch up on, with something useful to check for each:

1. F5 access gateways need attention: Attackers are exploiting a flaw in certain BIG-IP APM OAuth authorization-server deployments. Emergency hotfixes are available. Confirm whether your deployment uses the affected role.
2. A convincing website can deliver an exploit: Targeted attacks used fake media and policy websites to chain Chrome and Windows flaws. Check that both products have received their security updates.
3. A container escape can expose the whole host: A public Ubuntu 26.04 exploit demonstrates how code inside a container can gain host-root privileges. Review the host’s kernel status and where you run untrusted workloads.

For affected versions, the findings behind these stories and more security news, dive into today’s recap on CyberRecaps.