HACKERS NOW SCANNING SYSTEMS FOR RECENTLY-PATCHED ORACLE FLAW

Hackers now scanning systems for recently-patched Oracle flaw — Malicious actors are actively searching online for computers running outdated Oracle E-Business Suite software to exploit a newly revealed critical security gap. Organizations that have failed to apply the latest patches are currently being targeted by these probes. (Source: BleepingComputer)

CISA warns of hackers now exploiting critical Node2Shell flaw — US cybersecurity officials have issued an urgent alert confirming that malicious actors are actively weaponizing a severe compression vulnerability affecting Node.js applications. This specific flaw, which has been given multiple aliases including Broccoli2Shell and HTTP2Shell, allows attackers to execute arbitrary code by manipulating how data is compressed during transmission. (Source: BleepingComputer)

Nefilim and Hive ransomware affiliate gets 70 months in prison — A Ukrainian citizen has been sentenced to seven years behind bars for orchestrating ransomware campaigns that devastated hospitals and critical infrastructure globally between 2018 and 2021. His conviction as an affiliate of the Nefilim and Hive gangs highlights the severe personal consequences for those facilitating cyberattacks on high-value targets. (Source: BleepingComputer)

Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass — Adobe has deployed urgent patches to resolve eight severe vulnerabilities in Campaign Classic, including one with a near-perfect CVSS score of 9.9 that enables arbitrary code execution. These flaws allow attackers to bypass security controls and escalate privileges if they can be successfully triggered. (Source: The Hacker News)

FBI seizes 'bulletproof' hosting site accused of facilitating child abuse, money laundering — Federal agents have taken down the website of a notorious 'bulletproof' hosting service that has long been used to hide illegal activities online. This operation targets a platform specifically linked to funding criminal enterprises and spreading harmful content involving minors. (Source: The Record)