For the people who run university IT

Threat Brief

Each week, every AI-era security story, read and cut down to the few that touch a campus. Each one comes with one thing to do.

Edited by Peter Odintsov

Entropy Shield · Philadelphia

This week’s triage

Patch nowCheck exposureWatchRead and skipped

136

Stories read, 15 sources

Touch a campus

Patch before Friday

130

Safe to skip

01Patch nowWeb · Every department

WordPress 7.1.2 closes an unauthenticated file-inclusion bug that has been there since version 4.7.

An attacker without a login can make WordPress load a PHP file of their choosing. On some server and theme setups, that turns into remote code execution.

CVE-2026-87902 Help Net Security Security Affairs

Why a campus should care

Universities run WordPress in places central IT doesn’t watch: department sites, lab pages, conference microsites, a project nobody retired. The bug goes back to 4.7, so the old, forgotten installs are the exposed ones.

Do this Monday

Pull every WordPress host from your web inventory and DNS, including subdomains departments registered themselves.
Get each one to 7.1.2. Where auto-updates are off, that’s your gap.
Give owners a date: patched by Friday, or the site goes offline.

02Patch nowPerimeter

Check Point Management Server flaw, exploited since July 23, gets an emergency hotfix.

Why campus: The management server holds every firewall policy on the network. Many universities run Check Point at the edge and between data-center segments.

Do this: Apply the hotfix, then check logs back to July 23. Patching doesn’t remove anyone who’s already in.

CVE-2026-93616 Security Affairs Help Net Security

03Check exposureVPN · SSO

F5 BIG-IP APM zero-day allows code execution without a login, but only on OAuth servers.

Why campus: APM often sits in front of campus VPN and single sign-on. Whether you’re exposed depends on one setting.

Do this: Check whether any APM instance acts as an OAuth authorization server. If one does, patch today. If none do, patch on your normal cycle.

CVE-2026-94127 The Hacker News

04Check exposureIdentity

EvilTokens has been taken down. Device-code phishing hasn’t.

Why campus: Classroom devices and smart TVs sign in by asking users to enter a code, so faculty and students are used to it. The service compromised 12,000 inboxes across more than 10,000 organizations.

Do this: Block the device code flow in Entra Conditional Access for everyone who doesn’t need it. Show the help desk what the lure looks like.

Help Net Security The Hacker News

05WatchERP · Records

ShinyHunters claims it breached the FBI through a PeopleSoft zero-day.

Why campus: Student and employee records sit in PeopleSoft Campus Solutions and HR. The claim is unverified, and there’s no CVE or Oracle advisory yet.

Do this: Ask your ERP team now for the current patch level and what’s reachable from the internet, so you already know on the day an advisory comes out.

No CVE yetInfosecurity Magazine

06Check exposureResearch AI

Bifrost AI gateway flaw: a single request with no login runs commands on the server.

Why campus: Research labs are setting up their own LLM gateways, usually where central IT can’t see them.

Do this: Scan research subnets for AI gateways and model servers reachable without authentication. Start with Bifrost, LiteLLM and Ollama.

CVE-2026-90898 The Hacker News

Editor’s note

Four of this week’s six are old-fashioned perimeter and web bugs. The AI part is on the attacker’s side: EvilTokens used a model to write its lures and choose targets, and it still needed a person to type in a code. The controls that stop it are ones we already own.

— P.O.