Oracle News Articles

Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble

Attackers probe another EBS bug, and ShinyHunters' PeopleSoft 0-day turns out to involve three vulns

1 week ago

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch

Oracle EBS decoys recorded probing of patched CVE-2026-101767, an unauthenticated SQL injection flaw that can lead to remote code execution.

1 week ago

Hackers now scanning systems for recently-patched Oracle flaw

Attackers have begun probing the Internet for systems unpatched against a recently disclosed critical Oracle E-Business Suite (EBS) vulnerability.

1 week ago

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws

ShinyHunters exploited three chained Oracle PeopleSoft flaws enabling unauthenticated server takeover, with attacks spanning multiple sectors

1 week ago

Oracle Issues Emergency Java Update for Critical 9.1 HTTPS Trust Vulnerability - IT Security News

2026-10-23 09:10 Oracle has released an emergency Java security update to address CVE-2026-91403, a critical vulnerability affecting how Java applications trust digital certificates....

2 weeks ago

Oracle Issues Emergency Java Update for Critical 9.1 HTTPS Trust Vulnerability

Oracle has released an emergency Java security update to address CVE-2026-91403, a critical vulnerability affecting how Java applications trust digital certificates.

2 weeks ago

(TLP CLEAR) Weekly Vulnerabilities to Prioritize – October 8, 2026 - WaterISAC

The below vulnerabilities have been identified by WaterISAC analysts as important for water and wastewater utilities to prioritize in their vulnerability management efforts. WaterISAC shares critical...

1 month ago

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign

Google warns of a new ShinyHunters campaign mass targeting Oracle PeopleSoft with a modified CVE-2026-35273 exploit.

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers.

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells - SwapUpdate

Ravie LakshmananSep 26, 2026Vulnerability / Web Security

ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks

ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor.

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

ShinyHunters-linked attackers exploit CVE-2026-35273 in Oracle PeopleSoft, bypassing WAF rules to deploy web shells on dozens of systems.

CISA Gives Federal Agencies 72 Hours To Patch Actively Exploited Oracle Bug

An Oracle vulnerability patched in January is now being actively exploited, prompting CISA to give federal agencies just 72 hours to secure affected systems.

CISA Gives Federal Agencies 72 Hours To Patch Actively Exploited Oracle Bug

An Oracle vulnerability patched in January is now being actively exploited, prompting CISA to give federal agencies just 72 hours to secure affected systems.

CISA Gives Federal Agencies 72 Hours To Patch Actively Exploited Oracle Bug

An Oracle vulnerability patched in January is now being actively exploited, prompting CISA to give federal agencies just 72 hours to secure affected systems.

Oracle Proxy Flaw CVE-2026-21962 Fueled China-Linked Attacks on 100+ Governments

CVE-2026-21962, a CVSS 10.0 Oracle WebLogic proxy flaw exploited by China-linked hackers across government and commercial networks in 100+ countries, has triggered CISA’s tightest 72-hour federal

CISA orders federal agencies to patch actively exploited Oracle flaw by August 27– Expert Comments – Global Security Mag Online

Cybersécurité Sécurité informatique réseau Global Security Mag Magazine Online antivirus offres emploi sécurité actualité sécurité réseau SOC CERT (…)

CISA Gives Federal Agencies 72 Hours To Patch Actively Exploited Oracle Bug

An Oracle vulnerability patched in January is now being actively exploited, prompting CISA to give federal agencies just 72 hours to secure affected systems.

CISA Gives Federal Agencies 72 Hours To Patch Old 10/10 Oracle Bug

The Cybersecurity and Infrastructure Security Agency just added an old Oracle bug to its Known Exploited Vulnerabilities catalog, and the time to act is now.

CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw

Disclosed in January and honeypots buzzed soon after, CISA says it’s finally time for the USG to plug the gap

CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw

Disclosed in January and honeypots buzzed soon after, CISA says it’s finally time for the USG to plug the gap

CISA Warns of Oracle HTTP and WebLogic Server Vulnerability Exploited in Attacks - IT Security News

2026-08-25 12:08 The U.S. Cybersecurity and Infrastructure Security Agency has added CVE-2026-21962, an improper access control flaw affecting Oracle HTTP Server and the Oracle WebLogic...

CISA Warns of Oracle HTTP and WebLogic Server Vulnerability Exploited in Attacks

CISA added CVE-2026-21962, an improper access control flaw in Oracle HTTP Server and WebLogic Proxy Plug-in, to its KEV Catalog after confirming active exploitation.

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

CISA adds actively exploited CVE-2026-21962 to KEV; the Oracle flaw can expose or alter critical data via unauthenticated HTTP access.

CISA Warns of Exploited Oracle WebLogic Vulnerability

Threat actors have been exploiting CVE-2026-21962, a critical Oracle HTTP Server and WebLogic vulnerability patched in January.