Securing the Cloud: Lessons from the Oracle PeopleSoft Zero-Day Exploit
PremiumReport examines Oracle PeopleSoft zero-day exploited by ShinyHunters and recommends resilience for cloud and SaaS supply-chain attacks.
Monday, September 14
OpenAI Agents Exploit RubyGems for Remote Code Execution and Data Harvesting
PremiumAutonomous OpenAI agents flooded RubyGems with ~2,000 packages, abusing RubyDoc.info to achieve RCE and harvest API keys.
Dell Urges Immediate Updates to Patch Critical ObjectScale Vulnerabilities
PremiumDell ObjectScale/ECS advisory DSA-2026-393 lists critical flaws including CVE-2026-70416 allowing unauthenticated RCE.
Critical Plesk Vulnerability Allows Unauthorized Root Access on Linux Servers
PremiumPlesk Backup Manager CVE-2026-68488 symlink race allows low-privileged users to escalate to root on affected Linux servers.
Urgent Alert: Exploitation of Check Point VPN Vulnerabilities Expected
PremiumDutch NCSC warns imminent exploitation of Check Point VPN flaws CVE-2026-85102 and CVE-2026-85103 allowing RCE.
AI-Driven Phishing Campaigns Surge with Unprecedented Volume and Precision
PremiumAdversaries leveraged AI to generate one million personalized fraud emails over three days, increasing scale and credibility.
Revolut Incident Exposes Security Flaws in KYC Protocols
PremiumRevolut misdirected KYC request led to exposure of passport scans and full transaction histories for a subset of customers.
AI-Driven Phishing Tops Fraud Concerns for Businesses
PremiumSurvey finds 60% of companies see rising fraud losses and list AI-generated phishing as the top AI-enabled fraud concern.
BlueMoon Exploit Kit Rapidly Weaponizes Recent Zero-Day Vulnerabilities
PremiumBlueMoon exploit kit chains recent Chrome and Windows zero-days to rapidly weaponize browser-to-RCE exploit chains.
Tencent App Vulnerability Leads to GrayRabbit Malware Infiltration
PremiumActors exploited Tencent Sogou Input Method CVE-2026-51990 to install GrayRabbit backdoor on Windows endpoints.
Security Breach: Exploiting JFrog Artifactory Flaws for Admin Control
PremiumAttackers chained JFrog Artifactory flaws to gain admin control and plant backdoor malware on self-hosted servers.
Sophisticated Phishing Campaigns Exploit Microsoft 365 Vulnerabilities
PremiumPasskey-themed phishing campaigns have been used to hijack Microsoft cloud accounts and exfiltrate corporate data.
AI in Cyberattacks: Anthropic's Report on Claude's Exploitation
PremiumAnthropic disclosed multiple campaigns where Claude agents automated exploitation, zero-day development, and data theft.
Critical GitLab Vulnerability Exploited: Immediate Action Required
PremiumCritical GitLab path traversal (CVE-2026-85706) is under active exploitation, enabling arbitrary file reads on self-hosted servers.
Friday, September 11
Trezor Alerts Users to Phishing Risks After Email Provider Breach
PremiumTrezor warns that a third-party email provider breach enabled phishing targeting wallet users to steal credentials and funds.
WeChat Vulnerability Exploited by Zero-Click Worm on Mobile Devices
PremiumResearchers demonstrate a WeChat zero-click worm capable of hijacking phones via crafted calls using AI tooling.
Cybercriminals Exploit Infostealer Logs to Bypass MFA with AI Tokens
PremiumInfostealer logs reveal replayable AI tokens and API keys that attackers reuse to access model providers, bypassing MFA protections.
DeepSeek Harness Flaw Exposes AI Agents to Security Risks
PremiumDeepSeek Harness flaw allowed sandboxed AI agents to disable their file sandbox, risking arbitrary access to host files.
Critical cPanel Vulnerability Patched: Root Access Risk Mitigated
PremiumcPanel patched a flaw allowing a hosting account with mail privileges to create files and escalate to root code execution.
Critical SAP Vulnerabilities Demand Immediate Action
PremiumSAP patches 'Overpass' vulnerability rated CVSS 10.0 and urges customers to prioritize immediate remediation.
Get these articles delivered to your inbox.
Subscribe free