Trend Micro: three Japan-focused attacks used AI to different degrees
Only one case was confirmed as agent-driven; entry often used exposed legacy systems and default or reused credentials.
1
Stories per day · 30 days
2 RSS
Relatedcyberstrikeai3japan3agentic-ai1agentic-attacks1ai-agents1credential-access1credential-theft1critical-patch-update1data-theft1edge-devices1java-se1mysql1oracle1peoplesoft1trend-micro1vpn1
10 stories, newest first · one card per story
Stories tagged #weblogic
AI-assisted intruders target Japanese firms and steal credentials
TrendAI reconstructed three infrastructures; the deepest access used exposed admin panels and stolen or default credentials.
1
CyberStrikeAI’s 44 agents automated attacks on Japan organizations
Other listed targets included Taiwan, Hong Kong, the UK, France, Italy, Qatar, and Colombia.
2
Oracle October 2026 CPU lists flaws across dozens of products
The October 20 notice names JD Edwards, MySQL, Java SE, WebLogic, PeopleSoft and many other lines, without CVE details.
1
Oracle Corporation security advisory (AV26-929)
CCCS relays Oracle's September 2026 Critical Patch Update fixing vulnerabilities across WebLogic, Database, E-Business Suite, PeopleSoft, Siebel, and dozens more products.
Oracle’s September patches put Fusion Middleware back in the hot seat
Oracle's September 2026 CPU ships 673 patches including six CVSS 10.0 flaws in Fusion Middleware and Hyperion, none exploited in the wild.
6
Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data
CISA added actively exploited Oracle WebLogic flaw CVE-2026-21962 (CVSS 10.0) to its KEV catalog, letting unauthenticated attackers access or modify critical data.
U.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalog
CISA added actively exploited CVE-2026-21962, a CVSS 10.0 unauthenticated flaw in Oracle HTTP Server and WebLogic Proxy Plug-in, to KEV with an August 27 deadline.
2
Oracle security advisory – January 2026 quarterly rollup (AV26-042) – Update 2
CISA added actively exploited Oracle flaw CVE-2026-21962 to the KEV catalog; it allows remote unauthorized access to Oracle HTTP Server and WebLogic Proxy Plug-in.
4
Muhstik Botnet Attacks Tomato Routers to Harvest New IoT Devices
Unit 42 found a Muhstik botnet variant brute-forcing Tomato router web authentication to harvest IoT devices for crypto mining and DDoS attacks.
2