Securing the Cloud: Lessons from the Oracle PeopleSoft Zero-Day Exploit
PremiumReport examines Oracle PeopleSoft zero-day exploited by ShinyHunters and recommends resilience for cloud and SaaS supply-chain attacks.
§Topic · CVE & Vulnerabilities
CVE & Vulnerabilities
Newly disclosed CVEs, actively exploited vulnerabilities, and critical patches you need to apply now.
All dispatchesMonday, September 14
Dell Urges Immediate Updates to Patch Critical ObjectScale Vulnerabilities
PremiumDell ObjectScale/ECS advisory DSA-2026-393 lists critical flaws including CVE-2026-70416 allowing unauthenticated RCE.
Critical Plesk Vulnerability Allows Unauthorized Root Access on Linux Servers
PremiumPlesk Backup Manager CVE-2026-68488 symlink race allows low-privileged users to escalate to root on affected Linux servers.
Urgent Alert: Exploitation of Check Point VPN Vulnerabilities Expected
PremiumDutch NCSC warns imminent exploitation of Check Point VPN flaws CVE-2026-85102 and CVE-2026-85103 allowing RCE.
Revolut Incident Exposes Security Flaws in KYC Protocols
PremiumRevolut misdirected KYC request led to exposure of passport scans and full transaction histories for a subset of customers.
BlueMoon Exploit Kit Rapidly Weaponizes Recent Zero-Day Vulnerabilities
PremiumBlueMoon exploit kit chains recent Chrome and Windows zero-days to rapidly weaponize browser-to-RCE exploit chains.
Tencent App Vulnerability Leads to GrayRabbit Malware Infiltration
PremiumActors exploited Tencent Sogou Input Method CVE-2026-51990 to install GrayRabbit backdoor on Windows endpoints.
Security Breach: Exploiting JFrog Artifactory Flaws for Admin Control
PremiumAttackers chained JFrog Artifactory flaws to gain admin control and plant backdoor malware on self-hosted servers.
Sophisticated Phishing Campaigns Exploit Microsoft 365 Vulnerabilities
PremiumPasskey-themed phishing campaigns have been used to hijack Microsoft cloud accounts and exfiltrate corporate data.
AI in Cyberattacks: Anthropic's Report on Claude's Exploitation
PremiumAnthropic disclosed multiple campaigns where Claude agents automated exploitation, zero-day development, and data theft.
Critical GitLab Vulnerability Exploited: Immediate Action Required
PremiumCritical GitLab path traversal (CVE-2026-85706) is under active exploitation, enabling arbitrary file reads on self-hosted servers.
Friday, September 11
WeChat Vulnerability Exploited by Zero-Click Worm on Mobile Devices
PremiumResearchers demonstrate a WeChat zero-click worm capable of hijacking phones via crafted calls using AI tooling.
DeepSeek Harness Flaw Exposes AI Agents to Security Risks
PremiumDeepSeek Harness flaw allowed sandboxed AI agents to disable their file sandbox, risking arbitrary access to host files.
Critical cPanel Vulnerability Patched: Root Access Risk Mitigated
PremiumcPanel patched a flaw allowing a hosting account with mail privileges to create files and escalate to root code execution.
Critical SAP Vulnerabilities Demand Immediate Action
PremiumSAP patches 'Overpass' vulnerability rated CVSS 10.0 and urges customers to prioritize immediate remediation.
New 'ShieldCrash' Exploit Challenges Windows Defender Security
PremiumResearcher released a zero-day 'ShieldCrash' exploit targeting Windows Defender components, enabling local bypasses and exploits.
Critical Vulnerabilities in Cisco Firewalls Exploited for Malicious Attacks
PremiumCisco Talos confirms exploitation of Secure FMC flaws enabling root access, malware deployment and staged intrusions by multiple actors.
Critical VPN Certificate Vulnerabilities Patched by Check Point
PremiumCheck Point patches two 9.8 CVSS VPN certificate flaws allowing unauthenticated remote code execution under specific conditions.
AI-Driven Cyber Attack Compromises Hundreds of PaperCut Instances
PremiumActor used hundreds of AI agents to craft exploits for PaperCut NG/MF flaws and breached over 440 vulnerable instances.
Critical Cisco Secure FMC Vulnerability Actively Exploited, Agencies Urge Immediate Action
PremiumCisco and CISA warn CVE-2026-20079 in Secure FMC is exploited in the wild to gain elevated access and persist.
Get these articles delivered to your inbox.
Subscribe free