Critical Oracle E-Business Flaw Exploited in Real-World Attacks, Experts Warn Cyberattackers have begun exploiting a critical vulnerability in the Oracle E-Business Suite (EBS), which enables malicious actors to take control of vulnerable systems with relative ease. The flaw, tracked as CVE-2026-46817, affects the File Transmission component of Oracle’s Payments product and has been discovered to … Read more
A high-profile cyber attack has left the National Association of Insurance Commissioners (NAIC) scrambling to contain the fallout. The ShinyHunters extortion group claimed responsibility for breaching NAIC’s systems, but an investigation by the organization has revealed that the hackers stole only publicly available data and outdated information. The breach occurred when ShinyHunters exploited a zero-day … Read more
Nissan Reveals Extensive Employee Data Breach Linked to Widespread Oracle Zero-Day Attacks In a disturbing reminder of the ongoing cyber threat landscape, Nissan has disclosed that it suffered a significant data breach affecting current and former employees. The breach is believed to be linked to widespread attacks on Oracle PeopleSoft servers, which exploited a previously … Read more
Oracle E-Business Flaw Exploited by Hackers, Urgent Patching Recommended A critical vulnerability in Oracle’s E-Business Suite (EBS) financial application has been discovered to be actively exploited by hackers. According to threat intelligence company Defused, attackers are now using the flaw, tracked as CVE-2026-46817, to take over vulnerable systems with ease. For those unfamiliar, the Oracle … Read more
Critical Vulnerability in SimpleHelp Platform Exploited to Deploy New Stealer Malware A critical vulnerability in the SimpleHelp platform has been exploited by hackers to deploy a new cross-platform information stealer known as Djinn Stealer. The vulnerability, identified as CVE-2026-48558, allows attackers to create highly privileged technician accounts without authentication, giving them full access to systems … Read more
A High-Profile Breach Exposes Public Data, Raises Questions About Hacker Claims The National Association of Insurance Commissioners (NAIC) has confirmed that its systems were breached by the notorious hacking group ShinyHunters. The attackers claimed to have stolen sensitive data from NAIC’s Oracle PeopleSoft server, but an investigation revealed that they only accessed publicly available information … Read more
Nissan Discloses Employee Data Breach Linked to Widespread Oracle Exploits Automotive giant Nissan has revealed that it suffered a significant data breach affecting current and former employees, following a wave of attacks targeting Oracle PeopleSoft software. The breach is linked to exploits of a zero-day vulnerability in Oracle’s PeopleTools, which was used by threat actors … Read more
A malicious Chrome extension, dubbed “Perplexity,” has been discovered intercepting search queries and address bar inputs from millions of users worldwide. The extension, which was available for download on the official Chrome Web Store, posed as a productivity tool that offered personalized recommendations and insights to users. But beneath its innocuous façade, Perplexity was secretly … Read more
Microsoft Extends Support for Windows Server 2022 Hotpatching Until October 2027 In a move that will come as welcome news to many organizations, Microsoft has announced that it is extending support for hotpatching in Windows Server 2022 until October 2027. This means that systems running the Datacenter: Azure Edition of this operating system can continue … Read more
Meta’s WhatsApp has finally begun rolling out a long-awaited feature that promises to give users more control over their online identity. The company is introducing usernames, which allow users to hide their phone numbers from people not in their contact list. This move is aimed at providing an additional layer of privacy for the platform’s … Read more