A $10M bounty on FSB hackers, a second Oracle 9.8 under live exploitation, 14.2M exposed Japanese ISP accounts, root-level holes in highway sign controllers, and NAIC disputing ShinyHunters' claimed haul — five stories, all genuinely new since yesterday.