[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fer3r8NWt0fpYvtJYF2VdnumhoOxmk4tvYUw59qyMAqg":3},{"article":4,"iocs":50,"watch_terms":58,"solutions":59,"lesson":159},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"1356fe7d-9482-4687-8e74-dc876f7e35b8","Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble","oracle-celebrates-end-of-cybersecurity-awareness-month-with-quadruple-trouble-703e5e","Attackers probe another EBS bug, and ShinyHunters' PeopleSoft 0-day turns out to involve three vulns","Attackers are actively probing a critical SQL injection vulnerability in Oracle E-Business Suite (CVE-2026-101767) that can lead to remote code execution, despite Oracle having released a patch. Concurrently, a PeopleSoft zero-day exploited by ShinyHunters, initially identified as CVE-2026-35273, has been revealed to encompass three distinct vulnerabilities, allowing for combined exploitation to achieve RCE, with attackers deploying web shells on compromised systems.","Oracle E-Business Suite and PeopleSoft face critical vulnerabilities, with attackers probing EBS bugs and ShinyHunters","https:\u002F\u002Fwww.theregister.com\u002Fsecurity\u002F2026\u002F10\u002F28\u002Foracle-celebrates-end-of-cybersecurity-awareness-month-with-quadruple-trouble\u002F5306121","https:\u002F\u002Fimage.theregister.com\u002F?imageId=5306136&width=800","2026-10-28T19:56:56+00:00","2026-10-28T20:00:09.586689+00:00",8,[17,20,22,25,28,30],{"name":18,"type":19},"E-Business Suite","product",{"name":21,"type":19},"PeopleSoft",{"name":23,"type":24},"Oracle","vendor",{"name":26,"type":27},"ShinyHunters","threat_actor",{"name":29,"type":24},"Mandiant",{"name":31,"type":24},"Horizon3","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":32,"icon":34,"name":35,"slug":36},null,"Vulnerabilities","vulnerabilities",[38,40,45],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[51,55],{"type":52,"value":53,"context":54},"cve","CVE-2026-101767","Critical, unauthenticated SQL injection vulnerability in Oracle E-Business Suite leading to RCE.",{"type":52,"value":56,"context":57},"CVE-2026-35273","Vulnerability identifier for a PeopleSoft zero-day exploited by ShinyHunters, later revealed to be three distinct vulns.",[23,29,31],{"controls":60,"vendors":147},[61,90,118],{"slug":62,"name":63,"problem":64,"products":65},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[66,74,82],{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":91,"name":92,"problem":93,"products":94},"patch-management","Automated patch management","Known holes get closed in days, not months.",[95,103,110],{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":91,"product_name":107,"url":108,"description":109},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":119,"name":120,"problem":121,"products":122},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[123,131,139],{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":140,"vendor_name":141,"vendor_logo":142,"product_slug":143,"product_name":144,"url":145,"description":146},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",[148,154],{"slug":149,"name":150,"logo_path":151,"roles":152},"horizon3-ai","Horizon3.ai","\u002Fvendor-logos\u002Fhorizon3-ai.png",[153],"reported_by",{"slug":155,"name":23,"logo_path":156,"roles":157},"oracle","\u002Fvendor-logos\u002Foracle.png",[158],"affected",{"slug":160,"title":161,"body":162,"framework_refs":163,"framework_notes":171},"oracle-ebs-and-peoplesoft-flaws-exploited-despite-available-patches","Oracle EBS and PeopleSoft Flaws Exploited Despite Available Patches","Attackers are actively exploiting a critical SQL injection vulnerability in Oracle E-Business Suite (CVE-2026-101767) even though Oracle had already released a patch, highlighting a dangerous gap between patch availability and patch deployment. Simultaneously, a PeopleSoft zero-day leveraged by ShinyHunters expanded from one known CVE into three chained vulnerabilities enabling remote code execution and web shell deployment, compounding the risk for unpatched organizations. This dual incident underscores how delayed patching of internet-facing enterprise applications creates broad attack surfaces for sophisticated threat actors. The deployment of web shells indicates attackers are establishing persistent footholds, meaning the window between exploitation and full compromise can be extremely short.",[164,165,166,167,168,169,170],"CIS Control 7: Continuous Vulnerability Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","OWASP A06:2021 Vulnerable and Outdated Components","PCI DSS Requirement 6","NIS2 Article 21(2)(b)","CIS Control 17: Incident Response Management",{"NIS2 Article 21(2)(b)":172,"PCI DSS Requirement 6":173,"NIST SP 800-53 SI-2: Flaw Remediation":174,"CIS Control 17: Incident Response Management":175,"OWASP A06:2021 Vulnerable and Outdated Components":176,"CIS Control 7: Continuous Vulnerability Management":177,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":178},"NIS2 requires essential and important entities to implement appropriate measures for incident handling and vulnerability management; the failure to patch a known critical Oracle flaw in internet-facing ERP systems before active exploitation represents a clear gap against this obligation.","Requirement 6 mandates that organisations develop and maintain secure systems by applying vendor-supplied security patches within one month (critical patches sooner); Oracle EBS environments processing payment data that remained unpatched would be in direct violation and exposed to this active exploitation campaign.","SI-2 requires organisations to identify, report, and correct information system flaws within defined timeframes; had this control been enforced, the available Oracle patch would have been applied before ShinyHunters and other attackers began active probing.","With attackers deploying web shells and achieving RCE across PeopleSoft systems, a mature incident response capability is essential to detect, contain, and eradicate the intrusion quickly; this control's requirements for defined IR plans and playbooks would accelerate the organisation's ability to respond to the active compromise.","The SQL injection vulnerability in Oracle EBS directly reflects the risk of running outdated or unpatched software components; OWASP A06 calls for continuous monitoring of component versions and prompt upgrading, which would have closed the attack vector.","A published patch existed for the Oracle EBS SQL injection flaw yet systems remained unpatched; mandatory vulnerability scanning and time-bound remediation cycles required by this control would have driven faster patch application before active exploitation began.","This control mandates timely identification and remediation of technical vulnerabilities in software; applying it to Oracle EBS and PeopleSoft would have ensured the known CVEs were tracked and patched before exploitation escalated to RCE and web shell deployment."]