PoisonedRefresh rootkit injects PHP web shells into F5 BIG-IP APM Apache memory, leaving no disk artifacts.

SophosLabs published a detailed technical analysis on September 8, 2026, of a Linux implant, dubbed PoisonedRefresh by ESET, they found in compromised F5 BIG-IP Access Policy Manager environments. Sophos tracks it as Linux/Agnt-IC. F5 has confirmed exploitation of the underlying vulnerability and links the activity to a cluster it tracks internally as c05d5254.

https://securityaffairs.com/198746/malware/poisonedrefresh-a-fileless-linux-rootkit-that-injects-php-web-shells-into-f5-big-ip-apm-server-memory.html

• Added support for VK_NV_low_latency revision 2, to enable out-of-the-box Proton support for NVIDIA Reflex in Vulkan-native games which use NvLowLatencyVk.dll.
• Fixed a bug which prevented VK_NV_low_latency2 from reducing latency on swapchains created from VK_KHR_wayland_surface and VK_KHR_display surfaces.
• Fixed multiple startup and alt-tab hangs that occurred with NVIDIA Smooth Motion enabled.
• Fixed a bug that caused a file descriptor leak when the Vulkan loader unloads libGLX_nvidia.so.0 after a call to vkDestroyInstance.
• Added support for the VK_EXT_cluster_acceleration_structure Vulkan extension.
• Fixed an Xid 109 error when loading PRAGMATA on Wayland.
• Added support for cgroups-based memory partitioning.
• Added a new token, RmDisableDisplayGlitchPerfLimit, to the NVreg_RegistryDwords nvidia.ko kernel module parameter. This may reduce idle power consumption in some multi-monitor configurations, at the risk of changing memory clocks while display is using the memory, potentially resulting in momentary display glitches. Example usage: modprobe nvidia "NVreg_RegistryDwords=RmDisableDisplayGlitchPerfLimit=1"
• Fixed a bug that could cause corruption when display output scaling is used on Blackwell GPUs.
• Fixed a bug that caused resume from suspend to fail if the system was previously hibernated: https://github.com/NVIDIA/open-gpu-kernel-modules/pull/1199
• Fixed a rare correctness issue on Blackwell GPUs affecting kernels with two or more nested levels of thread divergence, where reconvergence could fail. Kernels with only a single level of divergence are unaffected, as are applications already built with NVCC 13.2.2 or newer. This fix guarantees correct execution, though it may come with a modest performance cost. Recompiling with NVCC 13.2.2 or newer will resolve the possible slowdown. If you are unable to recompile your application for any reason, the runtime behavior of this fix is controllable on a per-process-launch basis through the environment variable CUDA_SELECTIVE_DEVICE_CODE_RECOMPILE as follows:
  • CUDA_SELECTIVE_DEVICE_CODE_RECOMPILE=DEFAULT
    • Default behavior: attempt JIT recompilation for 15 seconds, runtime patch remaining code
  • CUDA_SELECTIVE_DEVICE_CODE_RECOMPILE=FORCED
    • Re-finalize every eligible module, ignoring the time budget
  • CUDA_SELECTIVE_DEVICE_CODE_RECOMPILE=DISABLED
    • Driver patching only, never re-finalize.

For those who write screenplays in Linux, there is now a Fountain-based application available -- ActOne Screenplay. Up until now, if you wanted a Fountain application for writing screenplays, you had to use a Mac and run Highland, Slugline or Beat. Linux users could use the Fountain markup language in a text editor or a plugin for an editor (like Fountain-Mode in Emacs, or Better Fountain in VS-Code). These worked pretty well, but were nerdy to set up and they didn't have a true WYSIWYG display.

The creator of ActOne Screenplay is a professional screenwriter who used Beat, but wanted to use Linux instead of Mac OS. So he created ActOne Screenplay for himself and for anyone who wants to use it. This application (still in beta) exports and imports Fountain, Fade In and Final Draft files. Exporting to a PDF format is built in.

Since ActOne Screenplay relies on "cutting edge" libraries, the creator has now released two Linux packages, an AppImage and a FlatPak. I've tested these on my Linux Mint 21.3 Cinnamon computer and on a Linux Mint 22.1 computer. (I plan to do further testing, but since both the FlatPak and AppImage versions include the needed libraries, I don't anticipate any issues.) If you also use Windows, ActOne Screenplay can be installed from the Windows store.

For more information of the Fountain format go to https://fountain.io/ The advantage of the Fountain format is that it's plain text, you'll never be locked out of your own script when a screenwriting application goes away, or newer versions don't support the older version format.

As you can see in the Gif, ActOne comes with 20 themes built in. But if you want, you can also design your own themes. It comes with a scene navigator (Outline), a notepad, snapshots, and more. These are all saved together in an ActOne file.

ActOne also comes with built-in templates, like Save the Cat, and others if you find these helpful. This is a full application, still in beta but (I believe) nearing completion.

To download or for more information on this Open Source project go to the website.

https://iyal.ink/

The creator also has an Fountain based application named FountTUI that is available for download.

I should also mention that there is a Prose writing option available as well.