Oracle News Articles

(TLP CLEAR) Weekly Vulnerabilities to Prioritize – October 8, 2026 - WaterISAC

The below vulnerabilities have been identified by WaterISAC analysts as important for water and wastewater utilities to prioritize in their vulnerability management efforts. WaterISAC shares critical...

6 days ago

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign

Google warns of a new ShinyHunters campaign mass targeting Oracle PeopleSoft with a modified CVE-2026-35273 exploit.

2 weeks ago

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers.

3 weeks ago

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells - SwapUpdate

Ravie LakshmananSep 26, 2026Vulnerability / Web Security

3 weeks ago

ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks

ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor.

3 weeks ago

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

ShinyHunters-linked attackers exploit CVE-2026-35273 in Oracle PeopleSoft, bypassing WAF rules to deploy web shells on dozens of systems.

3 weeks ago

CISA Gives Federal Agencies 72 Hours To Patch Actively Exploited Oracle Bug

An Oracle vulnerability patched in January is now being actively exploited, prompting CISA to give federal agencies just 72 hours to secure affected systems.

CISA Gives Federal Agencies 72 Hours To Patch Actively Exploited Oracle Bug

An Oracle vulnerability patched in January is now being actively exploited, prompting CISA to give federal agencies just 72 hours to secure affected systems.

CISA Gives Federal Agencies 72 Hours To Patch Actively Exploited Oracle Bug

An Oracle vulnerability patched in January is now being actively exploited, prompting CISA to give federal agencies just 72 hours to secure affected systems.

Oracle Proxy Flaw CVE-2026-21962 Fueled China-Linked Attacks on 100+ Governments

CVE-2026-21962, a CVSS 10.0 Oracle WebLogic proxy flaw exploited by China-linked hackers across government and commercial networks in 100+ countries, has triggered CISA’s tightest 72-hour federal

CISA orders federal agencies to patch actively exploited Oracle flaw by August 27– Expert Comments – Global Security Mag Online

Cybersécurité Sécurité informatique réseau Global Security Mag Magazine Online antivirus offres emploi sécurité actualité sécurité réseau SOC CERT (…)

CISA Gives Federal Agencies 72 Hours To Patch Actively Exploited Oracle Bug

An Oracle vulnerability patched in January is now being actively exploited, prompting CISA to give federal agencies just 72 hours to secure affected systems.

CISA Gives Federal Agencies 72 Hours To Patch Old 10/10 Oracle Bug

The Cybersecurity and Infrastructure Security Agency just added an old Oracle bug to its Known Exploited Vulnerabilities catalog, and the time to act is now.

CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw

Disclosed in January and honeypots buzzed soon after, CISA says it’s finally time for the USG to plug the gap

CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw

Disclosed in January and honeypots buzzed soon after, CISA says it’s finally time for the USG to plug the gap

CISA Warns of Oracle HTTP and WebLogic Server Vulnerability Exploited in Attacks - IT Security News

2026-08-25 12:08 The U.S. Cybersecurity and Infrastructure Security Agency has added CVE-2026-21962, an improper access control flaw affecting Oracle HTTP Server and the Oracle WebLogic...

CISA Warns of Oracle HTTP and WebLogic Server Vulnerability Exploited in Attacks

CISA added CVE-2026-21962, an improper access control flaw in Oracle HTTP Server and WebLogic Proxy Plug-in, to its KEV Catalog after confirming active exploitation.

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

CISA adds actively exploited CVE-2026-21962 to KEV; the Oracle flaw can expose or alter critical data via unauthenticated HTTP access.

CISA Warns of Exploited Oracle WebLogic Vulnerability

Threat actors have been exploiting CVE-2026-21962, a critical Oracle HTTP Server and WebLogic vulnerability patched in January. 

CISA orders feds to patch actively exploited Oracle flaw by Saturday

CISA has ordered federal agencies to secure their systems by Saturday against ongoing attacks exploiting a critical vulnerability in the Oracle E-Business Suite financial application.

Over 900 Oracle E-Business instances exposed to ongoing attacks

Over 900 Oracle E-Business Suite (EBS) instances have been found exposed online amid ongoing attacks exploiting a critical security flaw.

IT Security News Weekly Summary July - IT Security News

210 posts were published in the last hour 21:55 : IT Security News Daily Summary 2026-06-30 21:2 : Silent Swap Uses Fake Chrome Extension to Steal Crypto 21:2 : Watch out for “high paying, low effort” Amazon job texts 20:32…Read more →

IT Security News Daily Summary 2026-06-30 - IT Security News

155 posts were published in the last hour 21:2 : Silent Swap Uses Fake Chrome Extension to Steal Crypto 21:2 : Watch out for “high paying, low effort” Amazon job texts 20:32 : U.S. CISA adds SimpleHelp flaw to its Known…Read more →

Oracle E-Business Suite Payments flaw under attack (CVE-2026-46817) - Help Net Security

Exploitation attempts targeting a vulnerability (CVE-2026-46817) in Oracle's E-Business Suite's Oracle Payments module have been spotted.

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

Oracle E-Business Suite vulnerability CVE-2026-46817 (CVSS 9.8) is being actively exploited in the wild despite Oracle’s recent patch release.