Quantum hardness separation extends Bennett-Gill question
Conditional oracle separation shows structured quantum hardness can arise from unstructured assumptions.
Stories per day · 30 days
9 RSS
Relatede-business-suite10critical-patch-update8sql-injection7java4peoplesoft4graalvm3jsse3rce3remote-code-execution3shinyhunters3apex2fusion-middleware2java-se2mysql2openssl2ssrf2thin-client-framework2zero-day2
72 stories, newest first · one card per story
Stories tagged #oracle
Exploitation attempts hit patched Oracle EBS flaw CVE-2026-101767
Unauthenticated SQL injection in EBS 12.2.3–12.2.15 can run commands as APPS; the fix shipped on October 20.
1
Attackers probe patched Oracle EBS bug; PeopleSoft zero-day is three flaws
ShinyHunters used CVE-2026-35273 for theft and extortion; ZDI says Oracle bundled three PeopleSoft bugs under one CVE.
2
Attackers probe Oracle E-Business Suite SQL injection flaw CVE-2026-101767
Decoys recorded exploratory exploits on October 27 against the unauthenticated TCF servlet flaw, which chains SQL injection to command execution as the EBS application account.
2
Attackers scan for patched Oracle E-Business Suite flaw CVE-2026-101767
Defused saw exploratory SQL-injection exploits on decoys on October 27; Oracle has not marked the bug exploited.
1
Exploratory probes hit patched Oracle EBS RCE CVE-2026-101767
Defused saw unauthenticated SQL-injection attempts against EBS decoys on October 27; customer breaches are not confirmed.
Attackers probe newly patched critical Oracle EBS flaw
Defused honeypots logged exploratory exploits of CVE-2026-101767 on October 27; no other in-the-wild reports are cited.
1
ShinyHunters PeopleSoft zero-day is three flaws under CVE-2026-35273
Unauthenticated SSRF to the loopback-trusted admin hub yields code execution on PeopleTools 8.61 and 8.62.
1
ShinyHunters mass-exploits PeopleSoft SSRF-to-RCE bug CVE-2026-35273
A gateway request forgery can satisfy localhost trust checks and reach a file-write path to code execution.
3
OpenAI and Oracle to bring Oracle apps into ChatGPT
US customers can buy the OpenAI API, Codex, and ChatGPT Work through Oracle Marketplace.
Oracle October update patches 1,295 flaws, six rated CVSS 10.0
Unauthenticated network bugs can take over E-Business Suite Workflow, SOA Suite, Access Manager, and JD Edwards Orchestrator.
3
Oracle Java flaw CVE-2026-91403 allows unauthenticated remote attacks
The CVSS 9.1 JSSE issue concerns trust in compromised eMudhra intermediate certificates, not confirmed code execution.
Oracle emergency Java update distrusts weak eMudhra CAs (CVE-2026-91403)
The CVSS 9.1 JSSE flaw can let an on-path attacker forge trusted hostnames; no attacks are confirmed.
Oracle October 2026 CPU patches 1,295 flaws across dozens of products
Tenable counts 1,209 unique CVEs, including 95 critical, and Oracle has not flagged them as exploited.
10
Oracle alerts on unauthenticated Java JSSE flaw CVE-2026-91403
The CVSS 9.1 issue affects named Java SE and GraalVM builds and can be reached through JSSE APIs without credentials.
Oracle October 2026 CPU lists flaws across dozens of products
The October 20 notice names JD Edwards, MySQL, Java SE, WebLogic, PeopleSoft and many other lines, without CVE details.
1
Oracle October 2026 CPU fixes unauthenticated E-Business Suite takeover bug
CVE-2026-101809 scores CVSS 10.0 in Workflow Notification Mailer 12.2.3–12.2.15; three other issues rate 9.8, with no confirmed exploitation.
8
Oracle October 2026 CPU issues 1,295 patches, including CVSS 9.8 flaws
Six hundred ninety patches are remotely exploitable without authentication, spanning database, middleware, Java and applications.
5
Oracle October 2026 CPU fixes 1209 CVEs in 1295 patches
112 updates are critical; Fusion Middleware has 206 patches, 134 remotely exploitable without authentication.
3
Oracle EBS flaw CVE-2026-101767 allows unauthenticated SQLi and RCE
Application Object Library 12.2.3 through 12.2.15 is fixed in Oracle's October 20, 2026 Critical Patch Update.
4
CoreWeave bonds slip into distressed territory amid AI debt fears
Shares fell more than 20 percent, and the company reported more than $35 billion of debt.
Banks are now trying to offload the AI data center debt they just underwrote
Major banks are trying to shed AI data-center loans, including $38 billion tied to Oracle sites.
2
Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
FBI arrested Canadian expert Edward Dubrovsky over alleged ShinyHunters extortion, including an FBI systems intrusion.
1
Risky Bulletin: ShinyHunters suspects arrested in US and Jordan
Roundup: hackers stole data on 8.8 million Danes, and Oracle confirmed a 20-million-patient health breach.
16