Nissan discloses employee data breach linked to Oracle zero-day attacks
2026-06-30T01:23:29Z•8b392cf1017dc779bd24d0912b91c34f3fb8d3e23130cb97b4e63ee7a0fd1dde
active-exploitationai-securitycisadata-breachdjinn-stealeroracle-ebsoracle-peoplesoftshinyhunterssignalsimplehelpsupply-chainwhatsappzero-day
What happened
Multiple active attacks and data breaches reported: Nissan and the NAIC confirmed data theft after threat actors exploited a zero‑day in Oracle PeopleSoft (activity attributed to the ShinyHunters extortion group). Separately, attackers are actively exploiting a critical Oracle E‑Business Suite flaw (CVE-2026-46817). A critical SimpleHelp vulnerability (CVE-2026-48558) is being abused to deploy the new cross‑platform Djinn stealer. CISA issued an urgent patching deadline for an actively exploited Cisco UC Manager flaw. Other notable items: FBI/CISA warnings about Signal/WhatsApp targeting, a K‑
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 8b392cf1017dc779bd24d0912b91c34f3fb8d3e23130cb97b4e63ee7a0fd1dde
- Enrichment time
- 2026-06-30T01:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.