The critical Oracle PeopleSoft zero-day vulnerability, actively exploited by the ShinyHunters cybercrime group since May, has been identified as three chained flaws, researchers confirmed this week. Oracle patched all three under CVE-2026-35273 in June.
Bright Security has launched STAR Fuzzer, an agentic security tool that automates the creation of fuzzing harnesses to identify zero-day vulnerabilities in security-critical code.
Cisco has patched an actively exploited zero-day vulnerability in its Secure Email Gateway that allows remote unauthenticated attackers to execute commands with root privileges.
A critical path traversal vulnerability in Fortinet FortiMail, tracked as CVE-2026-104286, is under active exploitation. The zero-day could allow attackers to write arbitrary files and potentially achieve remote code execution. CISA and Fortinet have issued
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning after a critical zero-day vulnerability in Fortinet FortiMail email security appliances was found under active exploitation. Tracked as CVE-2026-104286, the flaw allows unauthenticated
