1119 - Uma correção, três falhas: como invasores tomaram servidores da Oracle sem credenciais

Cyber Morning Call · Oct 28, 2026 · 7m

Referências do Episódio

CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft (Zero Day Initiative)

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws (The Hacker News)

Discovering and exploiting vulnerabilities in critical, real-world software with Claude (Anthropic)

Tricks from the Past deployed via signed ChatGPT and Claude binaries (Check Point Research)

An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure (Kaspersky Securelist)

Apple backports CoreGraphics zero-day patches to older iPhones (BleepingComputer)…