Veille live
Veille CyberInfra — Veille cybersecurite : Default ‘admin:admin’ Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars Veille CyberInfra — Veille cybersecurite : Binance denies data breach after alleged ShinyHunters claims Veille CyberInfra — Veille cybersecurite : Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia Veille CyberInfra — Veille cybersecurite : Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records Veille CyberInfra — Veille cybersecurite : LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks Veille CyberInfra — Veille cybersecurite : Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety Veille CyberInfra — Veille cybersecurite : Default ‘admin:admin’ Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars Veille CyberInfra — Veille cybersecurite : Binance denies data breach after alleged ShinyHunters claims Veille CyberInfra — Veille cybersecurite : Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia Veille CyberInfra — Veille cybersecurite : Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records Veille CyberInfra — Veille cybersecurite : LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks Veille CyberInfra — Veille cybersecurite : Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety

Veille cybersecurite : ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws

28/10/2026

Source : The Hacker News

The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week.

Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request forgery (SSRF) that reaches an internal management interface because PeopleSoft trusts its own loopback address

Lire l’article original

Vous vous demandez si votre entreprise est exposee a ce type de faille ? Reservez un appel decouverte gratuit.

← Retour au blog