Tag Archive

#Oracle

2 articles tagged with #Oracle

#AI #AI Agents #AI Security #AI-Agent #AI-Agents #AI-Assisted #AI-Driven #AI-Driven Attacks #AI-Driven Threats #AI-Enabled Malware #AI-Powered #AI-Powered Attacks #AI-Powered Malware #AI-Security #API-Abuse #APT #Academic Capture #Accessibility Abuse #Adversarial AI #Adversarial-AI #Agentic AI #Agentic-AI #AhsayCBS #AiTM #Android #Antino #Apple #Audit Team #Authentication Bypass #Automated Exploitation #Automation #Autonomous #Autonomous AI #Autonomous Agents #Autonomous Malware #Autonomous-Agents #Autonomous-Attack #BYOD #Backup Security #Banking Fraud #Blinder Tunnel #Botnet #C2 #C2 Infrastructure #CISA #CISA KEV #CVE #CVE-2026-104286 #CVE-2026-107406 #CVE-2026-58704 #CVE-2026-88772 #CVE-2026-93616 #Check Point #China #Cisco #Cisco Talos #Citrix #ClickFix #Clop #Cloud Security #Cloud-C2 #CosmicPulse #Credential Harvesting #Credential Theft #Critical Infrastructure #Crypto Fraud #Cryptomining #Cyber Espionage #Cyber Extortion #Cyber Intelligence #Cyber Resilience #Cyber Warfare #Cyber-Conflict #Cyber-Defense #Cyber-Espionage #Cyber-Intelligence #Cyber-Physical #Cybercrime #Cybercriminal #Cybersecurity #Data Breach #Data Exfiltration #Data Extortion #Deepfake Detection #Double Extortion #Double-Extortion #Edge Security #Email Security #Endpoint Security #Energy Grid #Espionage #Evasion #Exploit Broker #Exploit Brokers #Exploit Kit #Exploit-Automation #Exploitation #Extortion #Exvicy #F5 #FSB #Financial Fraud #Financial Sector #Financial Services #Fire Ant #Firmware Vulnerability #Flax Typhoon #Fortinet #Go-lang #Grid Security #Healthcare Security #Human Rights #ICS #INC Ransom #IRGC #IT/OT Convergence #Industrial Control Systems #Industrial Cybersecurity #Industrial Security #Infostealer #Infrastructure #Infrastructure Compromise #Infrastructure Disruption #Infrastructure Security #Intellectual Property #Intelligence #Iran #JADEPUFFER #JDY Botnet #Jewelbug #KEV #Kernel #KillSec #LLM #LLM Security #LLM-Malware #LLMjacking #Langflow #Linux #MSS #MaaS #Malware #Malware Development #MedusaLocker #Mercenary #Mercenary Spyware #Middle East #Military Intelligence #Mobile Security #Mobile Surveillance #N0n #Nation-State #NationState #National Security #NetScaler #Network Security #Networking #Nimbus Manticore #OT Security #OT/ICS #Offensive AI #Operation KillSwitch #Operation Riptide #Oracle #PII #PLC #Panzer #Patch Management #Path Traversal #Pegasus #Pentagon #Persistence #Phishing #Polymorphic #Post-Compromise #Privacy #Privilege Escalation #Prompt Injection #Pwn2Own #Qilin #RCE #RaaS #Ransomware #RedFlick #SCADA #SD-WAN #SSH Tunneling #SaaS Abuse #Sabotage #SharePoint #ShinyHunters #Social Engineering #South Korea #Spear-phishing #Spyware #Star Blizzard #Steganography #Storm 2570 #Storm-2570 #Supply Chain #Supply Chain Security #Supply-Chain #Surveillance #Telecommunications #Threat Intelligence #Threat-Intelligence #Transportation #Trojan #UAT-11587 #UNC3886 #Vulnerability #Vulnerability Management #Vulnerability-Exploitation #WAF Bypass #Water Sector #Windows #Windows Security #Zammad #Zero Trust #Zero-Click #Zero-Day #iOS

criticalSep 27, 2026

ShinyHunters Resumes Exploitation of Oracle PeopleSoft via WAF Bypass Technique

The ShinyHunters extortion group is actively bypassing WAF protections to exploit the critical Oracle PeopleSoft CVE-2026-35273 vulnerability. This follows a surge in zero-day activity throughout September 2026.

#RCE #WAF Bypass #Data Exfiltration #Oracle #Extortion

criticalSep 27, 2026

ShinyHunters Bypass WAF Protections to Resume Exploitation of Oracle PeopleSoft Zero-Day

The ShinyHunters extortion group is actively exploiting a critical Oracle PeopleSoft vulnerability (CVE-2026-35273) by utilizing URL-encoding techniques to bypass existing WAF mitigations. This development follows a series of high-profile zero-day disclosures throughout September 2026.

#RCE #WAF Bypass #Extortion #Oracle #Zero-Day