Estée Lauder discloses data breach via Oracle E-Business flaw
2026-07-21T01:23:29Z•5edab134b69c45ff3aac45e1270ce97bc730e6e536e343c39294d9fe0ae160fb
7-zipacr-stealeragentic-aiautonomous-agentcrypto-theftdata-breachencforgehollowgraphmicrosoft-365-c2oracle-e-businessostiumransomwareremote-code-executionsandbox-escapeservice-nowsonicwallsupply-chainvipnetwordpresswsuszero-day
What happened
Multiple active attacks and high-impact security incidents were reported: threat actors exploited flaws in enterprise products (ServiceNow CVE-2026-6875 actively exploited; Oracle E-Business Suite led to an Estée Lauder data breach; SonicWall SMA1000 zero-days were used to install custom malware), public exploits released for WordPress "wp2shell" RCEs, and 7‑Zip patched an RCE. Attacks also targeted AI supply chains and tooling — autonomous agents breached Hugging Face and JadePuffer agents now deploy EncForge ransomware against AI model data; researchers demonstrated sandbox escapes in AI dev
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 5edab134b69c45ff3aac45e1270ce97bc730e6e536e343c39294d9fe0ae160fb
- Enrichment time
- 2026-07-21T01:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.