CISA Flags 2-Year-Old Oracle WebLogic Vulnerability as Actively Exploited

CISA added Oracle WebLogic flaw CVE-2024-21182 to its KEV catalog, giving federal agencies until June 4 to patch exposed servers.
ITmedia

「WebLogic」関連の最新 ニュース・レビュー・解説 記事 まとめ

「WebLogic」に関する情報が集まったページです。 Oracle WebLogicの脆弱性を狙った攻撃を観測ラックが注意喚起 ラックは、Oracle WebLogic Serverの脆弱性を狙った攻撃を観測した。悪用されるとデータの改ざんや流出といった被害を受ける恐れがある ...
brandequity.economictimes.indiatimes

Google says ShinyHunters hackers targeting education sector via Oracle exploit

Cybersecurity firms Mandiant and Google Threat Intelligence uncovered a major cyberattack. The hacking group ShinyHunters targeted Oracle's PeopleSoft software. This campaign exploited a zero-day ...
Bleeping Computer

CISA flags two-year-old Oracle flaw as actively exploited in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to secure their systems against a high-severity Oracle WebLogic Server vulnerability that was patched ...

Critical Security Patch Update: Oracle releases 245 security updates

Following an emergency security update for PeopleSoft, Oracle has now released its quarterly security patches.
CSOonline

Oracle releases 245 new security patches, all rated ‘high-priority security’

The Oracle Critical Security Patch update (CSPU) released this week contains 245 newly-announced fixes for supported on-premises software, some of which impact multiple products. It is in reaction to ...