Patch Now: Oracle's Fusion Middleware Has Critical RCE Flaw
2026-03-20T20:51:41Z•70be4083e33231ea1d8a5ea7d8e84f58e61854c0a3a5c98511f8ab0f1c95abe2
ciscocloud-securitycrypto-theftmobile-exploitopsecoraclepatch-managementransomwarercesupply-chainthreat-actorsvulnerabilityzero-day
What happened
This DarkReading digest highlights multiple high-risk developments: an urgent unauthenticated RCE in Oracle Fusion Middleware (Identity and Web Services Managers) requiring immediate patching; Interlock ransomware actors had early access to a critical Cisco enterprise firewall vulnerability; and the Beast Gang exposed a central ransomware/cloud server revealing systematic attacks on backups. Additional notable items include a multi-zero-day iPhone exploit chain (DarkSword) in active targeting, a new C2 implant ‘SnappyClient’ targeting crypto wallets, GlassWorm supply-chain malware in Open VSX,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- darkreading
- Record identifier
- 70be4083e33231ea1d8a5ea7d8e84f58e61854c0a3a5c98511f8ab0f1c95abe2
- Enrichment time
- 2026-03-20T20:51:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.