Recommended action for the day
Prioritize the audit of Linux authentication logs and Oracle ERP instances to detect long-term persistence and active zero-day exploitation.
State mandates and sophisticated supply chain exploits demand urgent infrastructure defense.
Risk Posture
Medium
Sustained activity. Monitor closely.
On KEV · 7d
7
Critical · 24h
0
Threats · 24h
5
Advisories · 7d
20
Why this matters
- Actively exploited. The ShinyHunters threat group is currently exploiting an unpatched Oracle ERP zero-day vulnerability to exfiltrate sensitive student and institutional data from U.S. higher education institutions.
- Supply chain attack. Over 400 Arch Linux User Repository (AUR) packages were hijacked to deploy credential stealers and eBPF rootkits, specifically targeting developer environments via malicious build scripts.
- Nation-state persistence. The China-linked actor Velvet Ant has been identified using a backdoor in Linux authentication software to maintain undetected access and bypass login protocols on enterprise servers for nearly a dec…
Needs eyes now
CVE-2026-35273 — Oracle PeopleSoft Enterprise PeopleTools: Oracle PeopleSoft Enterprise PeopleTools Missing…
Unauthenticated attackers can fully take over PeopleSoft Enterprise PeopleTools systems due to missing authentication; no active exploitati…
CVE-2026-10520 — Ivanti Sentry: Ivanti Sentry OS Command Injection Vulnerability
Unauthenticated remote attackers can gain root-level code execution on unmanaged Ivanti Sentry appliances; no active exploitation is curren…
CVE-2026-11645 — Google Chromium V8: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
Remote attackers can execute arbitrary code on devices running Chrome, Edge, or Opera via malicious web pages; active exploitation status i…
Also on the wire
- Ex-school district employee jailed for hacks on former employer
- Chinese hackers hijack auth flow, spy on isolated network for a decade
- Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication
- US Gov asks Anthropic to ban 'foreign national' access to Fable, Mythos
- U.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationals
- ShinyHunters Uses Oracle Zero-Day to Rampage Higher Ed