Share story
Security

Attackers probe Oracle E-Business Suite flaw patched on October 20

Attackers probe Oracle E-Business Suite flaw patched on October 20 Image: Primary
Threat intelligence company Defused said it detected exploratory exploits against Oracle E-Business Suite vulnerability CVE-2026-101767 on October 27. The flaw allows unauthenticated attackers with HTTP access to take over vulnerable systems, BleepingComputer reported. Oracle released patches on October 20. Defused describes an SQL injection that can lead to remote code execution. Shadowserver tracks over 670 internet-exposed EBS instances, but its count does not establish how many remain vulnerable. Oracle has not marked this flaw as exploited in the wild.
Sources
BleepingComputer
In this story
Oracle
Published by Tech & Business, a media brand covering technology and business. This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Capital Security
Capital Security

Upwind announces $400 million Series C at $3.8 billion valuation

Upwind Security announced a $400 million Series C led by Bessemer Venture Partners, valuing the cloud and AI security company at $3.8 billion. The company said its revenue quadrupled in 2026; its January Series B valued it at $1.5...

The Next Web
Capital AI
Capital AI

Circuit Mind raises $18.5 million Series A for AI circuit design

Circuit Mind said Wednesday that Norwest led an $18.5 million Series A, with a previously undisclosed seed round bringing the two rounds to $25 million. The London startup will use the money to expand its electronics design tools,...

The Next Web
Security
Security

Adobe patches eight critical Campaign Classic vulnerabilities

Adobe released patches for eight critical vulnerabilities in Campaign Classic that could allow arbitrary code execution, security feature bypass or privilege escalation, The Hacker News reported. The flaws affect version 7.4.4 bui...

The Hacker News
Security Policy
Security Policy

Nefilim and Hive ransomware affiliate sentenced to 70 months

Artem Aleksandrovych Stryzhak received a 70-month prison sentence for his role in Nefilim and Hive ransomware attacks targeting hospitals, government entities and businesses worldwide. The Ukrainian national pleaded guilty in Dece...

BleepingComputer
AI Security
AI Security

Anthropic says internal AI model built working exploit chains

Anthropic says an unreleased internal AI model found security flaws and combined them into working proof-of-concept exploits across browsers and operating systems. The company described five chains built in laboratory tests after ...

The Hacker News