News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Mon 28 Sep· 2 articles
-
Oracle PeopleSoft Enterprise PeopleTools2 articles this day · SecurityWeek first
Dutch Police Arrest Suspected ShinyHunters Hacker After Major Breaches · ShinyHunters Revive Attacks on PeopleSoft with WAF Bypass
-
Dutch Police Arrest Suspected ShinyHunters Hacker After Major Breaches
Dutch authorities have arrested 24-year-old Pepijn van der Stap in connection with an investigation into the ShinyHunters hacking group, according to sources and a later confirmation from Dutch police. Van der Stap, who used the alias “Umbreon”, was…
-
ShinyHunters Revive Attacks on PeopleSoft with WAF Bypass
Mandiant and the Google Threat Intelligence Group (GTIG) have warned that the ShinyHunters extortion group, tracked by Google as UNC6240, is conducting a fresh mass-exploitation campaign against Oracle PeopleSoft customers. PeopleSoft is used by large…
-
Fri 25 Sep· 1 article
-
ShinyHunters Expands Global Oracle PeopleSoft Exploitation Campaign
Mandiant and the Google Threat Intelligence Group say ShinyHunters, tracked as UNC6240, has resumed mass exploitation of Oracle PeopleSoft vulnerability CVE-2026-35273. The earlier campaign, observed between 27 May and 9 June 2026, mainly affected academic…
Wed 23 Sep· 2 articles
-
Oracle PeopleSoft Enterprise PeopleTools2 articles this day · SecurityWeek first
ShinyHunters Claims FBI Applicant Data Breach via Oracle Flaw · ShinyHunters Claims FBI Breach Exposed Agents’ Personal Data
-
ShinyHunters Claims FBI Applicant Data Breach via Oracle Flaw
ShinyHunters claimed on 22 September 2026 that it had breached the FBI and stolen information belonging to current and former employees and job applicants. The group reportedly offered about 5,000 records as evidence, claiming the data could include names,…
-
ShinyHunters Claims FBI Breach Exposed Agents’ Personal Data
ShinyHunters claims it breached FBI systems and accessed sensitive information from Criminal Justice, HR and Medlink services, including data on nearly all FBI agents and job applicants. To support the claim, the group defaced a subdomain of the FBI’s jobs…
-
Mon 21 Sep· 3 articles
-
Oracle E-Business Suite3 articles this day · Infosecurity first
ShinyHunters Claims Breach of Rival Clop’s Leak Site and Demands Bitcoin · ShinyHunters Hijacks Clop Leak Site and Threatens to Expose Secrets
-
ShinyHunters Claims Breach of Rival Clop’s Leak Site and Demands Bitcoin
ShinyHunters apparently breached rival ransomware group Clop’s dark-web leak site last week, defacing it with the message “DOMAIN SEIZED BY SHINYHUNTERS.” The group claimed it exploited an unauthenticated file-upload vulnerability in the Grav CMS used by the…
-
ShinyHunters Hijacks Clop Leak Site and Threatens to Expose Secrets
ShinyHunters reportedly hijacked and defaced Clop’s (also known as Cl0p) Tor-based data-leak site on 18 September 2026, turning the ransomware group’s extortion platform against it. The attackers allegedly exploited an unauthenticated file-upload…
-
ShinyHunters Claims It Hacked and Extorted Clop Ransomware Group
ShinyHunters has claimed it hacked the Clop ransomware group, defacing Clop’s dark-web leak site on the evening of 18 September 2026. The site displayed the message “THIS SITE HAS BEEN PWN3D BY SHINYHUNTERS”, a Pokémon ASCII image and a link to ShinyHunters’…
-
Sat 19 Sep· 1 article
-
ShinyHunters Claims It Breached and Defaced Clop’s Leak Site
The ShinyHunters extortion gang allegedly breached Clop (also known as Cl0p) ransomware’s Tor-based data leak site, defacing it and reportedly stealing server data and the private keys for its onion service. According to the report, the attack began on…
Wed 22 Jul· 1 article
-
Oracle WebLogic Flaw CVE-2026-60206 Allows Remote Server Takeover
The content discusses critical vulnerabilities in Oracle's WebLogic Server, specifically highlighting the discovery of 11 serious flaws, with a focus on CVE-2026-60206, which has a CVSS score of 9.9, suggesting a high risk of server takeover. These…
Thu 16 Jul· 1 article
-
ESET warns outdated Microsoft UEFI shims can bypass Secure Boot
ESET has warned about vulnerabilities in old Unified Extensible Firmware Interface (UEFI) shim bootloaders signed by Microsoft that could allow attackers to bypass Secure Boot protections. There are 11 UEFI shims identified, mostly from version 0.9 and…
Fri 29 May· 1 article
-
Oracle patches May 2026 flaws, CVE-2026-46840 CVSS 10.0
Oracle has released a significant security patch update for May 2026, addressing critical vulnerabilities across various enterprise product lines. The updates aim to eliminate flaws that could allow attackers to infiltrate corporate data systems. Key areas…
Wed 22 Apr· 1 article
-
Oracle Rolls Out 481 Patches, Many Remote Exploitable
Oracle released 481 new security patches as part of its April 2026 Critical Patch Update (CPU), covering 28 product families. Across those products, more than 300 fixes address vulnerabilities that are remotely exploitable without authentication, with…
Mon 23 Mar· 1 article
-
Oracle Releases Emergency Patch for Critical Identity Manager Vulnerability
Oracle has released out-of-band patches for a critical vulnerability, CVE-2026-21992, affecting its Identity Manager and Web Services Manager products, part of the Fusion Middleware suite. The flaw can be exploited by an unauthenticated attacker to achieve…
Sun 22 Mar· 1 article
-
Oracle fixes critical RCE flaw CVE-2026-21992 in Identity Manager
Oracle has fixed a critical vulnerability in Identity Manager, tracked as CVE-2026-21992, which allows unauthenticated remote code execution over HTTP. The flaw enables an unauthenticated attacker to take control of Oracle Identity Manager and Oracle Web…
Sat 21 Mar· 1 article
-
Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager
Oracle has released security updates to address a critical flaw in Identity Manager and Web Services Manager, tracked as CVE-2026-21992, which carries a CVSS score of 9.8. The vulnerability is described as remotely exploitable without authentication and…
Fri 20 Mar· 1 article
-
Patch Now: Oracle's Fusion Middleware Has Critical RCE Flaw
Oracle has disclosed a critical RCE flaw in Fusion Middleware, labeled CVE-2026-21992, which affects the Oracle Identity Manager (OIM) and Oracle Web Services Manager (OWSM). The security alert notes that the vulnerability enables remote code execution and…
No older articles match these filters.