Daily Brief
Oracle probes and CISA warning on active exploitation
Cyberr Brief2 stories
CISA warns of hackers now exploiting critical Node2Shell flaw
CISA says hackers have started exploiting the critical Brotli flaw known as Node2Shell, Broccoli2Shell, and HTTP2Shell. That makes it an immediate patching and exposure review item for services that process Brotli content.
What to do
BleepingComputer↗Check for affected Brotli components in exposed services and prioritise patching or temporary isolation this week.
Hackers now scanning systems for recently-patched Oracle flaw
Attackers are probing the internet for systems that have not been patched against a recently disclosed critical Oracle E-Business Suite flaw. The speed of the scanning means unpatched EBS instances may already be under active pressure.
What to do
BleepingComputer↗Find every Oracle E-Business Suite instance you run, confirm patch status, and block unnecessary internet exposure now.