A Single Web Request Could Take Over Oracle Payments
Oracle fixed an unauthenticated HTTP flaw that could take over the Payments component in E-Business Suite 12.2.3 through 12.2.15.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
The Patch Was Malware. FortiClient EMS Delivered It Like an Update
Attackers turned FortiClient EMS into a trusted malware-delivery system, pushing the EKZ credential stealer to managed endpoints as a fake vendor patch.
One Poisoned Extension Reached 3,800 of GitHub’s Internal Repositories
A compromised Nx Console update reached a GitHub employee device, stole credentials, and exposed roughly 3,800 internal repositories.
The Security Tool Became the Primitive: Defender Reached SYSTEM and Lost Availability
Two actively exploited Microsoft Defender flaws let local attackers reach SYSTEM or disrupt endpoint protection before automatic fixes arrived.
Microsoft’s AI Agents Found 16 Windows Vulnerabilities. The Workflow Matters More than the Score
Microsoft’s multi-model agentic security system offers a credible glimpse of faster vulnerability discovery—but its strongest lesson is the combination of specialised agents, tools and human validation. Microsoft has presented a multi-model agentic security system that uses more than 100 specialised…
Mini Shai-Hulud Turns Package Publishing into a Wormable Trust Path
A coordinated compromise of npm and PyPI packages shows how trusted publishing, CI caches and maintainer identities can combine into an automated supply-chain attack. Security researchers reported a new “Mini Shai-Hulud” campaign on 11 May involving trojanised packages in the…
The Exploit Needed a Foothold. Dirty Frag Turned It Into Root
Dirty Frag turned Linux kernel networking flaws into a reliable path from a low-privilege foothold to root across major distributions.
May 2026 Patch Tuesday: what Security and IT teams should prioritise
May 2026 Patch Tuesday covers 116 approved patch records and 183 unique CVEs across Microsoft, Adobe and SAP.
The Canvas Breach Exposes the Hidden Scale of Education Platforms
Two intrusions into Instructure’s Canvas platform show why a shared education service needs tenant-level visibility, tested fallbacks and careful treatment of attacker claims. Instructure detected unauthorised activity in Canvas on 29 April. On 7 May, the same actor obtained access…
The Firewall’s Authentication Portal Became a Path to Root
Attackers exploited a PAN-OS authentication portal flaw to reach root on exposed firewalls. Patching closes the entry path, but exposed appliances require incident review.