Defused Cyber detects exploit probes against newly patched Oracle EBS flaw

Image: Primary

Published Wednesday, October 28, 2026 · 4:08 PM EDT

Defused Cyber said its Oracle E-Business Suite decoys recorded exploratory exploits against CVE-2026-101767 on October 27. Oracle patched the critical vulnerability last week; it carries a CVSS score of 9.8. Horizon3.ai says an unauthenticated attacker who can reach the affected servlet can execute database queries as the APPS user, then run operating-system commands as the EBS application account. Accessible data may include financial, payroll, HR and procurement records. Internet-facing deployments face the greatest risk, but internal systems are also exposed when an attacker can reach the servlet from another compromised system or network segment.

Sources

The Hacker News

In this story

Oracle

Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Security

Daishin cyberattack exposes 38,490 customers' data as two other financial firms disclose incidents

Daishin Securities exposed personal information belonging to 38,490 customers in a cyberattack, TechCrunch reported, including names, email addresses and mobile phone numbers. Daishin has notified affected customers and is cooperating with authorities.

NVIDIA releases open-weight speech model for transcription and translation

NVIDIA released Nemotron 3.5 Transcribe, an open-weight speech model that combines transcription, speaker labeling, translation and answers to questions about recorded audio.

Products Infrastructure

Oracle pledges $20B financing limit through fiscal 2030

Oracle pledged to limit new financing to $20B through fiscal 2030 as it builds more cloud capacity, Reuters reported. The company expects capital spending to peak this fiscal year and next.

AI Products

Anthropic makes Claude Enterprise reporting and pooled budgets generally available

Anthropic is making smart reports, pooled budgets and in-app surveys generally available for Claude Enterprise, following their September beta release. Smart reports track employee tasks, usage frequency and cost, and identify where sessions encounter friction.

Capital AI

Plato raises $16M to build simulated workplaces for AI agents

Plato said it raised a $16M Series A led by Nava Ventures, bringing its total funding to $19M. Gradient Ventures, Transpose Platform and Microsoft AI chief Mustafa Suleyman also joined the round.

Infrastructure

GE Vernova agrees to acquire grid equipment supplier Trench for $9 billion

GE Vernova announced an agreement to acquire Trench Group, a supplier of high-voltage electricity grid equipment, for $9 billion, Yahoo Finance reported.