Attackers have been caught exploiting a critical flaw in Oracle E-Business Suite's Payments module just six weeks after Oracle patched it – and before any public proof-of-concept exploit was available. Researchers at Defused said they observed the first known exploitation of CVE-2026-46817 on June 27. The attackers were targeting the Oracle Payments File Transmission component in E-Business Suite releases 12.2.3 through 12.2.15, they said. The vulnerability, fixed in Oracle's May Critical Patch Update, carries a CVSS score of 9.8 and allows unauthenticated attackers to read arbitrary files from vulnerable servers. According to Defused, the activity didn't look like the indiscriminate internet scanning that often follows disclosure of a critical bug. Instead, its honeypots recorded just six exploitation attempts from a single source, all using what appeared to be a working exploit. The requests sought to retrieve sensitive files from the target system, suggesting the operator was testing or validating the technique rather than casting a wide net. The researchers said exploitation began before any public exploit code had surfaced, pointing to an attacker who had either reverse-engineered Oracle's patch or obtained a private exploit. The Shadowserver Foundation said it currently sees around 950 EBS instances exposed to the public internet, the majority in the US, although it stressed that figure says nothing about whether they're vulnerable or fully patched. The observed exploitation fits a pattern that's becoming increasingly familiar. Earlier this month, researchers warned that attackers had exploited a critical PeopleSoft zero-day before patches were widely deployed, with the ShinyHunters crew claiming to have compromised more than 100 organizations. They also boasted of having stolen HR and payroll data. This latest incident also follows Clop's lengthy campaign against Oracle E-Business Suite customers, disclosed last year after researchers found the ransomware crew had targeted internet-facing EBS servers for months before the activity became public. The newly exploited EBS vulnerability is probably not the last Oracle ERP bug to be targeted. Enterprise software has become a lucrative hunting ground for cybercrooks, and critical updates can double as roadmaps for anyone prepared to reverse-engineer the fixes and beat customers to deployment. ®
Schism caused by ordaining of four bishops without papal consent presents first crisis for Pope Leo
The Vatican has excommunicated a rebel group of ultra-conservative Catholics who defied Pope Leo by ordaining bishops without his consent, creating a schism in the Roman Catholic church.
In a statement on Thursday, cardinal Víctor Manuel Fernández, who heads up the Holy See’s Dicastery for the Doctrine of the Faith, said the group from the Society of Saint Pius X (SSPX), founded in the Swiss village of Ecône in 1970, had “committed an act of a schismatic nature” which, under canon law, is punishable with automatic excommunication.
Continue reading...The full-back on defying the odds, dealing with racism, Cape Verde’s party people and taking on Lionel Messi
“When we saw 1%, we just laughed.” Cape Verde liked those odds, and so did Sidny Lopes Cabral. “They gave us a 1% chance of reaching the next round, but we showed how big 1% is,” the defender says. He has always known there was a chance however small it looked, in Rotterdam or anywhere: in Germany, where he froze in the fifth tier earning £850 a month, using bin bags for curtains, and in America too. His mates told him he was crazy; he told his mum not to worry. “I always told them, ‘hey, I’m going to be a great football player: I’m gonna reach the top.’ And I’m living in my dream now.”
Now, an island of 300,000 people, the story of this World Cup, face the champions. And Lopes Cabral, the left-back and the second-youngest player in the squad at 23, faces arguably the best footballer of all time. “I hope I get some nice pictures of me standing next to him,” Lopes Cabral says. “I have no words to describe how I feel, how we all do. Back in Cape Verde, every game there are parties. In the Netherlands, in France, everywhere Cape Verdean people live. In Rotterdam it’s crazy.”
Continue reading...Retailer says sharp rise in fan sales over the latest heatwave weekend left stores scrambling to source stock
The boss of Currys has warned that supplies of air conditioning and fans are “tight” ahead of an expected fresh UK heatwave next week, after a recent boom in sales left retailers scrambling to source new stock.
Alex Baldock, chief executive of the electrical goods retailer, said cooling kit had been “flying off the shelves” during last month’s record heat for June in England, with sales of fans up nearly 3,000% over the latest heatwave weekend compared with a week earlier, while air conditioning sales soared 330%.
Continue reading...Playwright says decision is warning of what may happen if National Rally runs country amid accusations of cultural censorship
In Anglo-French playwright Alexis Michalik’s play Passeport, a young man has been beaten and left for dead in the notorious Calais refugee camp known as ‘the Jungle’.
When he wakes up, he has no idea who he is – and his only possession is a blue Eritrean passport containing the name Issa. With two others from the camp he decides to leave, but not to take the perilous Channel crossing to the UK but instead to try to integrate into France and obtain the necessary papers to remain.
Continue reading...
Earlier, the EU had threatened to include the Kulevi refinery in its 20th sanctions package over Russia’s invasion of Ukraine.
Nou zeg, wat verwarrend. Het WK voetbal, bekend van verbroedering, blijkt nu op schaamteloze wijze te worden ingezet om een anti-inclusieve agenda door te voeren waar de honden geen brood van lusten. Klaarblijkelijk zijn ze bij de Rotterdamse popzaal Annabel zo ontiegelijk bang dat Ibrahim Afellay ineens komt binnenwandelen, dat ze het voltallige mannelijke geslacht preventief weren. Wij kunnen enig begrip opbrengen voor die vrees, niemand staat te popelen om tijd door te brengen met Ibrahim, wij kijken nog liever in een donkere ruimte 26 keer de wedstrijd tussen Nederland en Marokko integraal terug dan de beste man één minuut over de wedstrijd tussen Nederland en Marokko te horen vertellen, maar het is nooit oké om een hele bevolkingsgroep over één kam te scheren. Nooit. Ja sorry, dat is nu eenmaal de regel en die regel duldt geen uitzonderingen. Sowieso werkt dit natuurlijk polarisatie in de hand en kun je spoedig een tegenreactie verwachten. Allemaal kerels die zonder dames toe te laten heel geconcentreerd ruim anderhalf uur naar vrouwenvoetbal gaan kijken, bijvoorbeeld. O nee, wacht!
ntomlin124 has added a photo to the pool:
Franklin Gordon Wild Rivers National Park. One of the last remaining wilderness areas, only accessible via the mighty Franklin River. An average rainfall of nearly 2.5 meters per year, its not to understand how this gorgeous was carved out.