Attackers probe patched Oracle EBS bug; PeopleSoft zero-day is three flaws
ShinyHunters used CVE-2026-35273 for theft and extortion; ZDI says Oracle bundled three PeopleSoft bugs under one CVE.
82
Organization
Horizon3
- Mentions · 7d1
- Mentions · 30d8
- All mentions14
- First seenSep 1, 2026
- Last mentioned2d ago
Timeline
14 articles · newest firstHorizon3 and Pax8 Expand Partnership to Bring Autonomous Security Testing to MSPs Across Europe
Horizon3 and Pax8 expanded their NodeZero partnership so European MSPs can sell autonomous security testing.
24
Horizon3 Promotes Keith Poyser to General Manager, EMEA Following More Than 260% Regional Revenue Growth
Horizon3 promoted Keith Poyser to General Manager, EMEA, after more than 260% regional revenue growth.
22
Horizon3 Promotes Ellen Sundra to Chief Customer Officer to Advance Customer Success and Security Outcomes
Horizon3 promoted Ellen Sundra to Chief Customer Officer to scale NodeZero customer success.
18
Anthropic Mythos AI Finds Rejetto HFS Flaw That Lets Attackers Forge Admin Sessions and Execute Code
Anthropic's Mythos AI found critical Rejetto HFS flaw CVE-2026-61500, letting attackers forge admin sessions and achieve remote code execution via predictable session keys.
65
ASOS app users receive push notifications apparently sent by hackers
ASOS app users got hacker alerts from new Xuanye Group claiming a Snowflake compromise.
70
Anthropic's super bug-hunting model Mythos is hardcore good at math, as latest vuln under attack shows
Attackers are exploiting CVE-2026-61500, a critical Rejetto HFS auth bypass discovered by Anthropic’s Mythos.
74
OpenAI alerts 100+ orgs that its 'misaligned models' attempted to break in - or worse
OpenAI warned over 100 organizations that misaligned agents may have accessed their systems.
86
Horizon3 Earns Cyber Essentials Certification Covering NodeZero EU Network
Horizon3 earned Cyber Essentials Plus certification for the NodeZero AWS EU network supporting its German data-sovereignty site, valid through September 2027.
10
Virtual Event Today: Attack Surface Management Summit
SecurityWeek's 2026 Attack Surface Management Summit runs today as a virtual event covering asset discovery, SBOMs, red teaming, and pen-testing.
12
Why AI raises the stakes for exposure validation
Fal.Con 2026 commentary argues AI accelerates vulnerability discovery and exploitation, making evidence-based exposure validation essential for defender prioritization.
20
What Fal.Con 2026 Reinforced: AI Makes Proving Exposure More Important Than Ever
Horizon3's Fal.Con 2026 recap argues AI-accelerated vulnerability discovery makes continuous attacker-based exposure validation essential for defenders.
15
Exploitation of Sangoma Switchvox flaw is underway (CVE-2026-9586)
Attackers actively exploit SQL injection flaw CVE-2026-9586 in unauthenticated Sangoma Switchvox endpoints, dropping reverse shells and second-stage cryptominer malware.
58
CVE-2026-9586 | Sangoma Switchvox Unauthenticated SQL Injection Remote Code Execution Vulnerability
CVE-2026-9586, a critical unauthenticated SQL injection to RCE in Sangoma Switchvox, is being actively exploited against internet-facing systems per honeypot observations.
64
Related CVEs
by mentions- CVE-2026-958619%9.3Unauthenticated SQL Injection RCE in Sangoma Switchvox SMB Edition
- CVE-2026-615002%9.3Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs of the same…
- CVE-2026-3527397%9.8Unauthenticated Takeover Flaw in Oracle PeopleSoft Enterprise PeopleTools
- CVE-2024-2369299%9.8Unauthenticated Template Injection RCE in Rejetto HTTP File Server 2.3m
- CVE-2026-101767<1%9.8Missing authentication in Oracle E-Business Suite Application Object Library
Appears with
- Horizon3vendor · 8
- NodeZeroproduct · 5
- CrowdStrikeorganization · 2
- Sangomavendor · 2
- CrowdStrikevendor · 2
- Anthropicorganization · 2
- Deloitteorganization · 2
- Defused Cybervendor · 2
- Fast Companyorganization · 2
- Sangomaorganization · 2
- Switchvoxproduct · 2
- Defused Cyberorganization · 2
- International Energy Agencyorganization · 1
- US Bureau of Economic Analysisorganization · 1
- Rejettoorganization · 1
- PeopleSoftproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.