#oracle
-
Attackers scan for unpatched Oracle E-Business Suite systems with critical flaw
A week after Oracle shipped a fix for the critical CVE-2026-101767 vulnerability in E-Business Suite, the first scanning and exploratory exploitation attempts have been observed.
-
Oracle PeopleSoft zero-day exploited by ShinyHunters turns out to be three chained flaws
Zero Day Initiative researchers found that the critical CVE-2026-35273 in Oracle PeopleSoft is really three linked bugs across two components. At its core is the product's default trust in its own loopback address.
-
CoreWeave's debt is becoming the whole AI industry's problem
CoreWeave's bonds slid into distressed territory and its shares fell more than 20 percent, with the anxiety around the AI boom's poster-child debtor spilling over onto other companies.
-
Attackers Bypass WAFs to Exploit an Oracle PeopleSoft Flaw
Google warns of a renewed wave of mass exploitation against a critical Oracle PeopleSoft flaw, with a ShinyHunters-linked group slipping past WAF rules and dropping web shells.
-
Oracle on the hook to pay data centre investors even if the site has no power
According to the Financial Times, Oracle is obligated to pay data centre investors even when a site has no electricity supply.
-
CISA Adds Critical Oracle WebLogic Vulnerability to Its Catalog of Actively Exploited Flaws
The CVE-2026-21962 vulnerability, with a maximum CVSS score of 10.0, lets an unauthenticated attacker access critical data over HTTP. Patches shipped back in January, but the attacks continue.
-
Oracle Bans AI Code in OpenJDK — but Not in Its Own Products
The OpenJDK project, stewarded by Oracle, has refused to accept neural-network-generated code, even as Larry Ellison insists that Oracle's own code is now written by artificial intelligence.
-
Hackers Hid the khunt Toolkit Inside an Oracle Database
Through an SQL injection, attackers planted a post-exploitation kit directly inside an Oracle database, compiling it as a Java object. The technique, according to Huntress, is spotted extremely rarely in real-world attacks.
-
Estée Lauder Discloses Data Breach via Oracle E-Business Suite Vulnerability
The cosmetics giant is notifying those affected: attackers breached an HR system built on Oracle E-Business Suite and stole employees' personal data.
-
CISA Orders US Federal Agencies to Fix Oracle Flaw by Saturday
CISA has directed federal agencies to remediate a critical vulnerability in Oracle E-Business Suite that attackers are already exploiting in real-world attacks.