SecurityWeek

Exploitation of Recent Oracle E-Business Suite Vulnerability Begins

Threat actors have started exploiting CVE-2026-46817, a critical-severity vulnerability in Oracle E-Business Suite’s Payments ...

Critical flaw in Oracle E-Business Suite is under immediate threat

Researchers warn that successful exploitation of the vulnerability could allow an attacker to compromise Oracle Payments.

Oracle E-Business Suite was under attack via critical flaw before the public exploit code was even released

Attackers have been caught exploiting a critical flaw in Oracle E-Business Suite's Payments module just six weeks after ...

Over 900 Oracle E-Business instances exposed to ongoing attacks

Over 900 Oracle E-Business Suite (EBS) instances have been found exposed online amid ongoing attacks exploiting a critical ...

Oracle Warns PeopleSoft Customers After Critical Zero-Day Exploited

Oracle issued emergency guidance for CVE-2026-35273, a critical PeopleSoft flaw exploited in a ShinyHunters-linked campaign targeting universities.
SecurityWeek

Insurance Regulators Group NAIC Hit in Oracle PeopleSoft Hack

NAIC has confirmed it was targeted in the recent hacking campaign that exploited an Oracle PeopleSoft zero-day vulnerability.
Morning Overview on MSN

The Oracle server bug hit universities hardest, with the extortion crew stealing data and demanding payment

Universities running Oracle servers became the primary targets of an extortion campaign that exploited a missing ...

CISA Flags 2-Year-Old Oracle WebLogic Vulnerability as Actively Exploited

CISA added Oracle WebLogic flaw CVE-2024-21182 to its KEV catalog, giving federal agencies until June 4 to patch exposed servers.
Bleeping Computer

Oracle silently fixes zero-day exploit leaked by ShinyHunters

Oracle has silently fixed an Oracle E-Business Suite vulnerability (CVE-2025-61884) that was actively exploited to breach servers, with a proof-of-concept exploit publicly leaked by the ShinyHunters ...