Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto

Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup ...

GitHub's AI security scan: A list of 'which repositories have it enabled'—The focus of AI features is shifting from 'can we use it?' to 'can we manage it?'

What you will learn in this article On October 6, 2026, GitHub announced in its official Changelog that Organization and ...

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume ...
cyberpress

ShinyHunters Exploits Oracle PeopleSoft Vulnerability CVE-2026-35273 in New Attack Wave

ShinyHunters has resumed large-scale attacks against Oracle PeopleSoft, using a small change to its exploit to get past some web application ...