TL;DR Oracle patched nine flaws in WebLogic Server in a special August 2026 update. Five carry critical scores. The top Oracle WebLogic vulnerability, CVE-2026-60702, scores a CVSS of 9.9. Success…

The fixes resolve over 1,000 vulnerabilities across two dozen products, including over 460 remotely exploitable bugs.

An attacker turned the comparatively small market for the MAMO token into a source of multimillion-dollar loans. Within a few hours, the assailant inflated the value of collateral in Moonwell, bor…

The notorious hacking syndicate ShinyHunters recently announced that their team successfully infiltrated the internal systems of the Federal Bureau of Investigation (FBI). They did this by exploit…

Hackers claiming to have stolen the FBI’s personnel data may have reached people from one of the bureau’s most closely guarded divisions. Within the trove appeared staff of the Remote …

Hackers claiming to have stolen the FBI’s personnel data may have reached people from one of the bureau’s most closely guarded divisions. Within the trove appeared staff of the Remote …

ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor.

The notorious ShinyHunters cybercriminal syndicate has aggressively resumed mass exploitation campaigns explicitly targeting Oracle PeopleSoft infrastructure. Alarmingly, they have engineered soph…

Changing one letter to its URL code let attackers walk past firewall rules meant to block a critical Oracle flaw. According to a new report from Mandiant and Google Threat Intelligence Group, that…

The FBI removed a contractor over a ShinyHunters-linked breach. Reuters sources identified Accenture and an unpatched Oracle PeopleSoft system.

The most excruciating security breaches occasionally do not originate from obscure zero-day vulnerabilities. Instead, they stem from a simple, overlooked update. The Federal Bureau of Investigatio…

The Federal Bureau of Investigation has apprehended another individual allegedly affiliated with the notorious ShinyHunters cybercriminal syndicate. This arrest directly follows the severe infiltr…

TL;DR The Oracle Critical Patch Update for October 2026 ships 1,295 security updates that fix 1,209 unique CVEs. Six flaws carry the maximum CVSS score of 10.0. Moreover, 562 entries in Oracle&#82…

TL;DR Oracle patched 203 Oracle Fusion Middleware vulnerabilities in its October 2026 Critical Patch Update. Four of them score a perfect CVSS 10.0, and 131 need no authentication to exploit. SOA …

TL;DR Oracle fixed a CVSS 10.0 E-Business Suite vulnerability, CVE-2026-101809, in its October 2026 Critical Patch Update. The flaw lets an unauthenticated attacker take over the Workflow product …

TL;DR Oracle fixed 98 MySQL vulnerabilities in its October 2026 Critical Patch Update. The two most severe, CVE-2025-15467 and CVE-2026-9547, score CVSS 9.8 and come from bundled OpenSSL and curl …

Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches.

One delayed security update can leave critical business systems exposed. Oracle’s October 2026 Critical Patch Update highlights the scale…

One delayed security update can leave critical business systems exposed. Oracle’s October 2026 Critical Patch Update highlights the scale…

TL;DR Oracle has issued an out-of-band Oracle Java security alert for CVE-2026-91403, rated CVSS 9.1. The update distrusts intermediate CA certificates tied to the eMudhra compromise in Java SE an…