Výsledky hledání

výrobce: Oracle× typ: zneužíváno× v celém archivu zrušit filtry

5 karet z 7 položek CZ · EN/orig

Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.

SPOJENO PŘES CVE CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

On September 25, 2026, Mandiant released a report regarding continued mass exploitation of CVE-2026-35273 by the ShinyHunters group. TrendAI’s Zero Day Initiative first reported this CVE to Oracle on June 10, 2026, following an investigation I conducted with Minh Giang and Lucas Miller of TrendAI Research. Although Oracle issued a patch under a single CVE, we reported three distinct vulnerabilities across multiple PeopleSoft components. We are coordinating with Oracle to assign separate CVEs…

KEV ✓ · ransomware EPSS 0.97 CVSS 9.8 CVE-2026-35273 Oracle Google Microsoft školství zdravotnictví doprava veřejná správa US

tg: varování tg: zneužíváno tg: rozbor tp: malware tp: ransomware

· ZDI Blog · CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft · BleepingComputer · ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks · Mandiant / Google TI · ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft · Zero Day Initiative · ZDI-26-387: Oracle PeopleSoft HttpListeningConnector Server-Side Request Forgery Vulnerability

27th July – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 27th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Nichirei, a Japan-based frozen-food supplier and logistics company, has experienced a ransomware attack that disrupted shipping operations and affected approximately 5,000 customers. KFC Japan warned of possible shortages. Nichirei confirmed personal data theft, while the RansomHouse group claimed responsibility and published a subset of the stolen…

KEV ✓ EPSS 0.20 CVE-2025-66376 CVE-2026-16232 CVE-2026-50522 Check Point Oracle Microsoft Zimbra energetika vodárenství doprava veřejná správa IL

tg: incident tg: zneužíváno tg: přehled tp: ransomware tp: únik dat tp: AI tp: průmyslové systémy

· Check Point Research · 27th July – Threat Intelligence Report