Maintenance in progress

three distinct high-severity breach events clustered in the same cycle: shinyhunters claimed a nissan americas breach via a cvss 9.8 oracle peoplesoft zero-day and a separate 2.2-million-record kodak breach; a second oracle zero-day (cvss 9.8) in e-business suite payments was observed under active exploitation on honeypots before any public proof-of-concept existed; and ransomware groups began exploiting a microsoft defender privilege escalation flaw disclosed in april. separately, an apple supplier (tata electronics) was compromised with iphone 18 pro component designs leaked to the dark web. the simultaneous activation of multiple high-severity unpatched or recently-patched flaws across enterprise infrastructure vendors in a single window is anomalous.

vulnerability disclosure feeds and cybersecurity industry reporting