Maintenance in progress

two high-severity vulnerabilities were under active exploitation simultaneously: a cvss 9.8 flaw in splunk enterprise allowing unauthenticated remote file manipulation, with a federal patch deadline of june 23; and an oracle peoplesoft pre-authentication remote code execution zero-day exploited for two weeks before a patch existed, compromising over 100 organizations, predominantly universities. separately, the fortibleed campaign was disclosed as having compromised over 86,000 fortigate devices through default credential abuse. the convergence of three distinct critical exploits in a single reporting window is atypical.

us cybersecurity agency alerts and threat intelligence reporting