Oracle News Articles

CISA Gives Federal Agencies 72 Hours To Patch Actively Exploited Oracle Bug

An Oracle vulnerability patched in January is now being actively exploited, prompting CISA to give federal agencies just 72 hours to secure affected systems.

1 week ago

CISA Gives Federal Agencies 72 Hours To Patch Actively Exploited Oracle Bug

An Oracle vulnerability patched in January is now being actively exploited, prompting CISA to give federal agencies just 72 hours to secure affected systems.

1 week ago

CISA Gives Federal Agencies 72 Hours To Patch Actively Exploited Oracle Bug

An Oracle vulnerability patched in January is now being actively exploited, prompting CISA to give federal agencies just 72 hours to secure affected systems.

1 week ago

Oracle Proxy Flaw CVE-2026-21962 Fueled China-Linked Attacks on 100+ Governments

CVE-2026-21962, a CVSS 10.0 Oracle WebLogic proxy flaw exploited by China-linked hackers across government and commercial networks in 100+ countries, has triggered CISA’s tightest 72-hour federal

1 week ago

CISA orders federal agencies to patch actively exploited Oracle flaw by August 27– Expert Comments – Global Security Mag Online

Cybersécurité Sécurité informatique réseau Global Security Mag Magazine Online antivirus offres emploi sécurité actualité sécurité réseau SOC CERT (…)

1 week ago

CISA Gives Federal Agencies 72 Hours To Patch Actively Exploited Oracle Bug

An Oracle vulnerability patched in January is now being actively exploited, prompting CISA to give federal agencies just 72 hours to secure affected systems.

1 week ago

CISA Gives Federal Agencies 72 Hours To Patch Old 10/10 Oracle Bug

The Cybersecurity and Infrastructure Security Agency just added an old Oracle bug to its Known Exploited Vulnerabilities catalog, and the time to act is now.

1 week ago

CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw

Disclosed in January and honeypots buzzed soon after, CISA says it’s finally time for the USG to plug the gap

1 week ago

CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw

Disclosed in January and honeypots buzzed soon after, CISA says it’s finally time for the USG to plug the gap

1 week ago

CISA Warns of Oracle HTTP and WebLogic Server Vulnerability Exploited in Attacks - IT Security News

2026-08-25 12:08 The U.S. Cybersecurity and Infrastructure Security Agency has added CVE-2026-21962, an improper access control flaw affecting Oracle HTTP Server and the Oracle WebLogic...

1 week ago

CISA Warns of Oracle HTTP and WebLogic Server Vulnerability Exploited in Attacks

CISA added CVE-2026-21962, an improper access control flaw in Oracle HTTP Server and WebLogic Proxy Plug-in, to its KEV Catalog after confirming active exploitation.

1 week ago

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

CISA adds actively exploited CVE-2026-21962 to KEV; the Oracle flaw can expose or alter critical data via unauthenticated HTTP access.

1 week ago

CISA Warns of Exploited Oracle WebLogic Vulnerability

Threat actors have been exploiting CVE-2026-21962, a critical Oracle HTTP Server and WebLogic vulnerability patched in January. 

1 week ago

CISA orders feds to patch actively exploited Oracle flaw by Saturday

CISA has ordered federal agencies to secure their systems by Saturday against ongoing attacks exploiting a critical vulnerability in the Oracle E-Business Suite financial application.

Over 900 Oracle E-Business instances exposed to ongoing attacks

Over 900 Oracle E-Business Suite (EBS) instances have been found exposed online amid ongoing attacks exploiting a critical security flaw.

IT Security News Weekly Summary July - IT Security News

210 posts were published in the last hour 21:55 : IT Security News Daily Summary 2026-06-30 21:2 : Silent Swap Uses Fake Chrome Extension to Steal Crypto 21:2 : Watch out for “high paying, low effort” Amazon job texts 20:32…Read more →

IT Security News Daily Summary 2026-06-30 - IT Security News

155 posts were published in the last hour 21:2 : Silent Swap Uses Fake Chrome Extension to Steal Crypto 21:2 : Watch out for “high paying, low effort” Amazon job texts 20:32 : U.S. CISA adds SimpleHelp flaw to its Known…Read more →

Oracle E-Business Suite Payments flaw under attack (CVE-2026-46817) - Help Net Security

Exploitation attempts targeting a vulnerability (CVE-2026-46817) in Oracle's E-Business Suite's Oracle Payments module have been spotted.

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

Oracle E-Business Suite vulnerability CVE-2026-46817 (CVSS 9.8) is being actively exploited in the wild despite Oracle’s recent patch release.

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

Ravie LakshmananJun 30, 2026Vulnerability / Enterprise Software

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild - IT Security News

A critical security flaw impacting Oracle E-Business Suite has come under active exploitation in the wild, according to Defused Cyber. The vulnerability, tracked as CVE-2026-46817 (CVSS score: 9.8), refers to an improper privilege management and authentication flaw in Oracle Payments…Read more →

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild - NewsBreak

A critical security flaw impacting Oracle E-Business Suite has come under active exploitation in the wild, according to Defused Cyber. The vulnerability, t

Exploitation of Recent Oracle E-Business Suite Vulnerability Begins

Threat actors have started exploiting CVE-2026-46817, a critical-severity vulnerability in Oracle E-Business Suite’s Payments product.

Nissan discloses employee data breach linked to Oracle zero-day attacks

Nissan is warning that it suffered a data breach affecting current and former employees after threat actors exploited an Oracle PeopleSoft vulnerability in data theft attacks previously linked to the ShinyHunters extortion group.

Hackers Exploiting Critical Oracle E-Business Suite Vulnerability Actively in Attacks

Threat actors are actively exploiting CVE-2026-46817, a critical unauthenticated remote takeover vulnerability in Oracle E-Business Suite (EBS), with live attack activity captured across honeypot infrastructure over the weekend of June 27–28, 2026.