Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells Source: The Hacker News Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 (CVSS score: 9.8), a critical security flaw that could resul Read original
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells Source: The Hacker News Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 (CVSS score: 9.8), a critical security flaw that could resul Read original
Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws Source: The Hacker News Threat actors are exploiting two critical security flaws in WordPress plugins Super Forms and Elementor Pro, according to findings from Wordfence. The vulnerabilities in question are - CVE-2026-14894 (CVSS score: 9.8) - A missing file type validation vulnerability in Super Forms – Drag & Dr Read original
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day Source: The Hacker News Google on Thursday released security updates to patch 12 vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2026-85046 (CVSS score: 8.8), has been described as a type confusion bug in V8, Chrome’s JavaScript and WebAss Read original
Hackers exploit Sangoma Switchvox flaw to deploy reverse shells Source: BleepingComputer Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution. […] Read original
Hackers exploit Sangoma Switchvox flaw to deploy reverse shells Source: BleepingComputer Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution. […] Read original
Hackers exploit critical JFrog Artifactory flaw to forge admin tokens Source: BleepingComputer A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access. […] Read original
Hackers exploit critical JFrog Artifactory flaw to forge admin tokens Source: BleepingComputer A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access. […] Read original
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain Source: The Hacker News SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN appliances that have been exploited in zero-day attacks. The vulnerabilities, discovered internally by SonicWall’s William Perry and Adam Babis, are listed below - CVE- Read original
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain Source: The Hacker News SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN appliances that have been exploited in zero-day attacks. The vulnerabilities, discovered internally by SonicWall’s William Perry and Adam Babis, are listed below - CVE- Read original