Nissan discloses employee data breach linked to Oracle zero-day attacks

BleepingComputer collection: multiple active exploitation and data-theft incidents. Threat actors (linked to the ShinyHunters extortion group) exploited a zero-day in Oracle PeopleSoft to steal data from organizations including Nissan and the NAIC (NAIC reports only publicly available/outdated logs and configs). Defused observed active exploitation of a critical Oracle E-Business Suite flaw. A critical SimpleHelp vulnerability (CVE-2026-48558) is being abused to deploy the cross‑platform Djinn Stealer. CISA issued an urgent patching deadline for an actively exploited Cisco Unified CM Server漏洞;