DanSec

Vendor

Oracle

In 77 briefs, most recently 29 October 2026. RSS for this tag

Learn more: Vulnerabilities (NVD) ↗

Known exploited (CISA KEV)

46 Oracle vulnerabilities are on CISA's list of vulnerabilities exploited in the wild, 13 of them used in ransomware campaigns. Most recent:

Coverage in DanSec Daily

  1. Sony ISP breach exposes 2.5M customer records, DHS staff data leaked via Okta, and Cisco firewall VPN zero-day exploited. Covers Volt Typhoon and more.
  2. Sony's So-net breach exposing 2.58M customers, GMO Onamae ransomware breach, and Oracle PeopleSoft zero-day exploited by ShinyHunters.
  3. Railway secrets exposure, Onamae VPS malware on 26,739 servers, LiteLLM supply chain attack, and critical PHP2Shell RCE flaws under mass exploitation.
  4. The ASOS breach, Google domain hijacking via .gh/.sl/.as registries, FortiBleed attacks on Fortinet FortiGate, and Atlassian CVE-2026-21589 exploitation.
  5. The $350M Bitget crypto exchange breach, Citrix NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 under active exploitation, and ShinyHunters' Oracle …
  6. Citrix NetScaler zero-days under active exploitation, ShinyHunters abusing Oracle PeopleSoft CVE-2026-35273, and Microsoft SharePoint CVE-2026-65660 added to …
  7. The ShinyHunters FBI breach claim, the F5 BIG-IP APM zero-day CVE-2026-94127, and the Miljödata GDPR fine, plus other vulnerabilities and threat actor activity.
  8. Flock camera footage dumped by hackers, a WordPress plugin backdoored on about 1,500 sites, and a WSO2 JWT bypass under active exploitation.
  9. Iran-linked hackers shut a UK power plant for four days, Oracle WebLogic flaw CVE-2026-21962 is actively exploited, and TikTok pays $400M COPPA settlement.
  10. Sakura Internet and CareCloud breaches, Dahua camera compromises, and the Cl0p PTC Windchill extortion campaign, plus actively exploited Windows IKE and GitLab …
  11. Unlimited Technology breach hits 3.8M people, SharePoint flaws exploited in Swiss government attacks, and TeamPCP linked to Redis and supply chain campaigns.
  12. Oracle database hack via khunt toolkit, Snowflake data theft guilty plea, and actively exploited JetBrains TeamCity RCE.
  13. Everest ransomware hits Stadler Rail, Upbound's $13M Acima lease fraud, and a Check Point SmartConsole zero-day exploited in the wild.
  14. WordPress wp2shell webshell attacks, Microsoft SharePoint RCE exploitation, and Anubis ransomware targeting Coca-Cola's Fairlife.
  15. Hugging Face breach by an autonomous AI agent, Estée Lauder and EY data breaches, and actively exploited ServiceNow and SonicWall zero-days.
  16. Coca-Cola's Fairlife ransomware halts US dairy output; 23andMe pays $18M to 43 states; Scattered Spider pair jailed over TfL hack.
  17. The Medtronic data breach by ShinyHunters, exposed Oracle E-Business Suite instances under attack, and Scattered Spider arrest news.
  18. Aflac Japan breach hits 4.38M customers, Nissan PeopleSoft campaign and Nidec $2M Blackfield extortion.
  19. Nissan and NAIC breached via Oracle PeopleSoft flaw tied to ShinyHunters; Djinn Stealer spreads through SimpleHelp CVE-2026-48558; 236,000 Uni-App sites abused …
  20. Fortinet FortiBleed leak exposes 73,932 VPN credentials, Kodak confirms a ShinyHunters breach, and Microsoft Defender zero-day RoguePlanet emerges.
  21. Kodak breach by ShinyHunters, iRhythm ransom theft, and three Fortinet FortiSandbox flaws actively exploited across up to 30,000 devices.
  22. Arch Linux AUR supply-chain compromise of 400+ packages, Handala's Cal Water hack, and Anthropic model takedown under new US export controls.
  23. Novo Nordisk trial data breach, Tchap messaging breach, and Oracle PeopleSoft zero-day exploited by ShinyHunters.
  24. ShinyHunters hit Oracle PeopleSoft and Nottingham University; Ivanti Sentry flaw exploited; Microsoft's record 206-flaw Patch Tuesday.
  25. WeedHack malware infected 116,000+ Minecraft systems, Red Hat NPM packages hit by credential-stealing worm, and Gamaredon exploits WinRAR in Ukraine attacks.
  26. The Dashlane vault breach, the Miasma npm supply chain attack on Red Hat packages, and active exploitation of Windows Netlogon CVE-2026-41089 and Palo Alto …
  27. Canvas/Instructure breach exposing up to 275M students, DAEMON Tools supply chain backdoor, and a zero-day in Palo Alto PAN-OS firewalls.
  28. DAEMON Tools supply chain backdoor, ShinyHunters' Vimeo breach, and a claimed 280M-record Instructure theft lead this cybersecurity news brief.
  29. Malicious checkmarx/kics Docker images, a self-propagating npm worm stealing developer tokens, and Lotus Wiper attacks on Venezuela's energy sector.
  30. Quest KACE CVE-2025-32975 actively exploited; Oracle Identity Manager CVE-2026-21992 possibly exploited before patch; VoidStealer bypasses Chrome encryption.
  31. The Trivy supply chain attack by TeamPCP, Oracle Identity Manager flaw CVE-2026-21992, and Iranian cyberattacks disrupting Maryland hospitals.
  32. Navia breach exposes 2.7M records; Trivy GitHub Actions compromised again; Magento defacement campaign hits thousands of sites.
  33. The Stryker wiper attack by Handala, Michelin's Oracle EBS breach, critical n8n RCE flaws, and Microsoft's March Patch Tuesday fixes.
  34. The Oracle E-Business Suite breach at Madison Square Garden, APT28's MSHTML zero-day CVE-2026-21513, and North Korea's Contagious Interview npm campaign.
  35. The Polish energy grid cyberattack attributed to ELECTRUM, the eScan update server breach, and the FBI seizure of the RAMP cybercrime forum.
  36. Zendesk ticket systems hijacked for global spam, Cisco zero-day CVE-2026-20045 exploited for RCE, and Fortinet FortiGate attacks via CVE-2025-59718 patch …
  37. ESA confirms breach of external servers, Korean Air data theft tied to Oracle EBS hack, and BlackCat ransomware pleas by ex-Sygnia and DigitalMint staff.
  38. LKQ Oracle EBS breach, Cisco AsyncOS zero-day CVE-2025-20393 exploited by China-linked APT, and Kimwolf botnet hijacking 1.8M Android devices for DDoS.
  39. Clop's Oracle E-Business Suite zero-day breach at Barts Health, active exploitation of the React2Shell flaw, and a record 29 Tbps Aisuru DDoS attack.
  40. Cloudflare's record 29.7 Tbps Aisuru botnet DDoS, the Oracle E-Business Suite Clop campaign hitting universities, and WordPress King Addons plugin takeovers.
  41. Coupang breach exposing 33.7M users, Shai-Hulud 2.0 npm attack leaking 400,000 developer secrets, and North Korean threat actors renting engineers' identities …
  42. Gainsight breach expands to more Salesforce customers, Shai-Hulud v2 npm-to-Maven supply chain attack, and Qilin ransomware hits South Korean MSP. Plus London …
  43. Dartmouth breach via Oracle E-Business Suite by Clop, OnSolve CodeRED emergency alert disruption, and SitusAMC hack hitting US banks, plus Fluent Bit flaws and …
  44. The Oracle EBS extortion campaign hitting Cox, Canon and Mazda, the Shai-Hulud npm malware wave, and Harvard's voice phishing breach, plus new zero-days.
  45. Cox Enterprises Oracle EBS breach, WhatsApp scraping of 3.5B phone numbers, and APT31 targeting Russian IT firms.
  46. The Salesforce Gainsight breaches by ShinyHunters, the CrowdStrike insider leak, and the actively exploited Oracle Identity Manager flaw (CVE-2025-61757).
  47. Salesforce OAuth data access via Gainsight, Italy's FS Italiane breach through Almaviva, and Operation WrtHug compromising 50,000+ Asus routers.
  48. The Oracle E-Business Suite-linked Cl0p breaches including Logitech, Chrome and FortiWeb zero-days, and the record 15.72 Tbps Aisuru DDoS attack on Microsoft …
  49. Logitech and Washington Post breaches tied to Clop's Oracle E-Business Suite attacks, plus Fortinet FortiWeb zero-day exploited and added to CISA KEV.
  50. The Oracle EBS data theft fallout, Operation Endgame takedowns, and actively exploited Fortinet and WatchGuard flaws in today's cybersecurity news.
  51. The GlobalLogic Oracle EBS data theft, the Rhadamanthys infostealer takedown, and Microsoft's November 2025 Patch Tuesday with 63 flaws including a kernel …
  52. Oracle EBS Cl0p extortion hits nearly 30 firms incl. Logitech and Washington Post; CBO confirms breach; Konni abuses Google Find Hub.
  53. The Dentsu/Merkle breach, Cl0p's Oracle EBS zero-day attacks on Schneider Electric and Emerson, and TEE.Fail trusted execution attacks.
  54. Magento/Adobe Commerce SessionReaper (CVE-2025-54236) mass compromise, MuddyWater Phoenix backdoor campaign, and SharePoint ToolShell exploitation by Chinese …
  55. The PassiveNeuron espionage campaign, the actively exploited Oracle E-Business Suite SSRF flaw (CVE-2025-61884), and a WatchGuard Firebox RCE flaw affecting …
  56. F5 breach, Muji ransomware outage via Askul, AWS two-hour outage, and Salt Typhoon's Snappybee attack on a European telecom, plus GlassWorm and WatchGuard …
  57. Envoy Air's Oracle EBS data theft claimed by Clop, Prosper's breach of 17.6 million accounts, and Zendesk email bombing.
  58. F5 BIG-IP source code theft, Capita's £14M UK fine, and Clop's Oracle zero-day attack on Harvard.
  59. Prince Group crypto seizure, Harvard breached via Oracle E-Business Suite zero-day CVE-2025-61884, and Flax Typhoon ArcGIS backdoor campaign.
  60. SimonMed Imaging breach by Medusa, Oracle EBS zero-day hitting Harvard and Clop, and Salesforce-linked data leaks by extortion groups.
  61. Oracle E-Business Suite flaw allows unauthenticated data access; new Rust-based ChaosBot malware uses Discord for C2; NY smishing targets residents with fake …
  62. SonicWall SSL VPN compromises across 100+ environments, Oracle EBS zero-day malware attacks, and FBI seizure of BreachForums domains tied to ShinyHunters.
  63. FBI seizes BreachForums amid ShinyHunters Salesforce extortion; Gladinet CentreStack zero-day CVE-2025-11371 and Oracle EBS zero-day attacks actively exploited.
  64. Oracle EBS zero-day exploited by CL0P, SonicWall cloud backup breach exposing firewall configs, and Discord ID photo leak of 70,000 users.
  65. Discord Zendesk breach affecting 5.5M users, Qilin's Asahi brewery leak, and a LockBit-Qilin-DragonForce ransomware cartel.
  66. Salesforce customer data theft by ShinyHunters, Clop's Oracle EBS zero-day, and Redis 'RediShell' RCE flaw.
  67. Red Hat and Discord breaches, Cl0p exploiting an Oracle E-Business Suite zero-day, and a GoAnywhere MFT flaw abused in Medusa ransomware attacks.
  68. Oracle E-Business Suite zero-day CVE-2025-61882 exploited by Cl0p for data theft, plus ParkMobile's $1-per-user breach settlement and a Zimbra CVE-2025-27915 …
  69. Covers Asahi ransomware, Salesforce data extortion by ShinyHunters, Jaguar Land Rover repeat attacks, and CISA-flagged Meteobridge root RCE exploited in the …
  70. Red Hat GitLab repo breach claim, WestJet breach affecting 1.2M, and Oracle E-Business Suite extortion campaign possibly tied to Cl0p are the top stories.
  71. Clop's Oracle E-Business Suite extortion campaign, the WestJet and Allianz Life breaches, and the WireTap/Battering RAM physical attack on Intel SGX and AMD …
  72. The $27M BigONE crypto exchange breach, Salt Typhoon's nine-month Army National Guard intrusion, and Cisco ISE CVE-2025-20337 (CVSS 10) with other …
  73. Co-op's 6.5M member data theft, UNFI's up to $400M sales hit and Louis Vuitton breaches tied to ShinyHunters.
  74. UK arrests over Scattered Spider attacks on M&S, Co-op and Harrods; Qantas breach hits 5.7M customers; Citrix NetScaler CVE-2025-5777 added to KEV.
  75. Procolored printer drivers spread malware for six months, Coinbase offers $20M bounty after extortion, and Intel CPUs face new Spectre-style flaws.
  76. The Coinbase insider data breach and extortion attempt, SAP NetWeaver exploitation by BianLian and RansomExx, and Samsung MagicINFO Mirai attacks.
  77. SonicWall SMA VPN devices under active attack, Apple zero-days in targeted spyware attacks, and Smishing Triad toll SMS phishing in US and UK.