XSS.is, The Forum That Ran the Ransomware Supply Chain Is Down. The Market Isn’t
2026-07-01T02:51:45Z•e9b3772230b6662fbe450d03db59e6ad333effc75310f54d7911bee49af6ef3f
active exploitationad fraudaflac japanai-assisted vulnerability discoveryapple security updatesbrowser extension fraudcisa kevcredential theftcve-2026-46817cve-2026-48558cybercrime forum takedowndata breachfbikddimessaging account compromiseoracle e-business suiterussian cyber espionagesimplehelpssustegoadunc4221unc5792us bountywebkit vulnerabilitiesxss.is
What happened
Multiple high-impact cyber events reported: law enforcement (France/Ukraine/Europol) arrested the alleged admin of XSS.is, a major Russian-language cybercrime forum and escrow service. CISA added a critical SimpleHelp authentication-bypass (CVE-2026-48558, CVSS 10.0) to its Known Exploited Vulnerabilities catalog; affected SimpleHelp versions ≤5.5.15 require urgent remediation. A critical Oracle E-Business Suite vulnerability (CVE-2026-46817, CVSS ~9.8) is being actively exploited to take over Oracle Payments. Large-scale data breaches were disclosed: Aflac Japan (~4.38M customers/agents) andK
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- e9b3772230b6662fbe450d03db59e6ad333effc75310f54d7911bee49af6ef3f
- Enrichment time
- 2026-07-01T02:51:45Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.