
PeopleSoft Zero-Day Escalates
Oracle disclosed an unauthenticated remote-code-execution flaw and urged immediate patching amid active attacks; follow-up coverage tied the zero-day to hundreds of organizations and gigabytes of stolen data.
28 stories from 13 sources
The week in Cybersecurity
Click on a headline to see stories that shaped it.
Threads
3 threads

Oracle disclosed an unauthenticated remote-code-execution flaw and urged immediate patching amid active attacks; follow-up coverage tied the zero-day to hundreds of organizations and gigabytes of stolen data.

AI-related security concerns appeared across the week, moving from malware that activates under AI agents to AI-assisted scams, espionage, and disputes over tools' security. The recurrence points to AI becoming a widening cybersecurity battleground rather than one isolated flaw.

A bug in Meta's AI support chatbot exposed recovery paths without two-factor authentication and likely enabled about 20,225 Instagram account takeovers; the incident resurfaced the next day as a 20,000-account breach tied to the same flaw.
Day’s Recap