CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct9 so far
Exploited only
17 articles · 20 Mar – 28 Sep

Latest days

Mon 28 Sep· 2 articles

  1. Oracle PeopleSoft Enterprise PeopleTools2 articles this day · SecurityWeek first

    Dutch Police Arrest Suspected ShinyHunters Hacker After Major Breaches · ShinyHunters Revive Attacks on PeopleSoft with WAF Bypass

    2 outletsCVE-2026-35273CVE-2026-35273Exploited

Fri 25 Sep· 1 article

  1. ShinyHunters Expands Global Oracle PeopleSoft Exploitation Campaign

    Mandiant and the Google Threat Intelligence Group say ShinyHunters, tracked as UNC6240, has resumed mass exploitation of Oracle PeopleSoft vulnerability CVE-2026-35273. The earlier campaign, observed between 27 May and 9 June 2026, mainly affected academic…

    Google CloudCVE-2026-35273CVE-2026-35273Exploited

Wed 23 Sep· 2 articles

  1. Oracle PeopleSoft Enterprise PeopleTools2 articles this day · SecurityWeek first

    ShinyHunters Claims FBI Applicant Data Breach via Oracle Flaw · ShinyHunters Claims FBI Breach Exposed Agents’ Personal Data

    2 outletsCVE-2026-35273CVE-2026-35273Exploited

Mon 21 Sep· 3 articles

  1. Oracle E-Business Suite3 articles this day · Infosecurity first

    ShinyHunters Claims Breach of Rival Clop’s Leak Site and Demands Bitcoin · ShinyHunters Hijacks Clop Leak Site and Threatens to Expose Secrets

    3 outletsCVE-2025-61882CVE-2025-61882Exploited

Sat 19 Sep· 1 article

  1. ShinyHunters Claims It Breached and Defaced Clop’s Leak Site

    The ShinyHunters extortion gang allegedly breached Clop (also known as Cl0p) ransomware’s Tor-based data leak site, defacing it and reportedly stealing server data and the private keys for its onion service. According to the report, the attack began on…

    DataBreachesCVE-2025-61882CVE-2025-61882Exploited

Wed 22 Jul· 1 article

  1. Oracle WebLogic Flaw CVE-2026-60206 Allows Remote Server Takeover

    The content discusses critical vulnerabilities in Oracle's WebLogic Server, specifically highlighting the discovery of 11 serious flaws, with a focus on CVE-2026-60206, which has a CVSS score of 9.9, suggesting a high risk of server takeover. These…

    SecurityOnlineCVE-2026-60206CVE-2026-60206

Thu 16 Jul· 1 article

  1. ESET warns outdated Microsoft UEFI shims can bypass Secure Boot

    ESET has warned about vulnerabilities in old Unified Extensible Firmware Interface (UEFI) shim bootloaders signed by Microsoft that could allow attackers to bypass Secure Boot protections. There are 11 UEFI shims identified, mostly from version 0.9 and…

    SecurityWeekCVE-2026-8863CVE-2026-8863

Fri 29 May· 1 article

  1. Oracle patches May 2026 flaws, CVE-2026-46840 CVSS 10.0

    Oracle has released a significant security patch update for May 2026, addressing critical vulnerabilities across various enterprise product lines. The updates aim to eliminate flaws that could allow attackers to infiltrate corporate data systems. Key areas…

    SecurityOnlineCVE-2026-46833CVE-2026-46833

Wed 22 Apr· 1 article

  1. Oracle Rolls Out 481 Patches, Many Remote Exploitable

    Oracle released 481 new security patches as part of its April 2026 Critical Patch Update (CPU), covering 28 product families. Across those products, more than 300 fixes address vulnerabilities that are remotely exploitable without authentication, with…

    SecurityWeekCVE-2026-21992CVE-2026-21992

Mon 23 Mar· 1 article

  1. Oracle Releases Emergency Patch for Critical Identity Manager Vulnerability

    Oracle has released out-of-band patches for a critical vulnerability, CVE-2026-21992, affecting its Identity Manager and Web Services Manager products, part of the Fusion Middleware suite. The flaw can be exploited by an unauthenticated attacker to achieve…

    SecurityWeekCVE-2026-21992CVE-2026-21992

Sun 22 Mar· 1 article

  1. Oracle fixes critical RCE flaw CVE-2026-21992 in Identity Manager

    Oracle has fixed a critical vulnerability in Identity Manager, tracked as CVE-2026-21992, which allows unauthenticated remote code execution over HTTP. The flaw enables an unauthenticated attacker to take control of Oracle Identity Manager and Oracle Web…

    Security AffairsCVE-2026-21992CVE-2026-21992

Sat 21 Mar· 1 article

  1. Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager

    Oracle has released security updates to address a critical flaw in Identity Manager and Web Services Manager, tracked as CVE-2026-21992, which carries a CVSS score of 9.8. The vulnerability is described as remotely exploitable without authentication and…

    The Hacker NewsCVE-2026-21992CVE-2026-21992Exploited

Fri 20 Mar· 1 article

  1. Patch Now: Oracle's Fusion Middleware Has Critical RCE Flaw

    Oracle has disclosed a critical RCE flaw in Fusion Middleware, labeled CVE-2026-21992, which affects the Oracle Identity Manager (OIM) and Oracle Web Services Manager (OWSM). The security alert notes that the vulnerability enables remote code execution and…

    Dark ReadingCVE-2026-21992CVE-2026-21992Exploited

No older articles match these filters.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device