Patch Now: Oracle's Fusion Middleware Has Critical RCE Flaw

2026-03-20T20:51:41Z70be4083e33231ea1d8a5ea7d8e84f58e61854c0a3a5c98511f8ab0f1c95abe2
ciscocloud-securitycrypto-theftmobile-exploitopsecoraclepatch-managementransomwarercesupply-chainthreat-actorsvulnerabilityzero-day

What happened

This DarkReading digest highlights multiple high-risk developments: an urgent unauthenticated RCE in Oracle Fusion Middleware (Identity and Web Services Managers) requiring immediate patching; Interlock ransomware actors had early access to a critical Cisco enterprise firewall vulnerability; and the Beast Gang exposed a central ransomware/cloud server revealing systematic attacks on backups. Additional notable items include a multi-zero-day iPhone exploit chain (DarkSword) in active targeting, a new C2 implant ‘SnappyClient’ targeting crypto wallets, GlassWorm supply-chain malware in Open VSX,

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
darkreading
Record identifier
70be4083e33231ea1d8a5ea7d8e84f58e61854c0a3a5c98511f8ab0f1c95abe2
Enrichment time
2026-03-20T20:51:41Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Patch Now: Oracle's Fusion Middleware Has Critical RCE Flaw · Baitaphish