Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
2026-10-28T19:23:59Z•fb7f427504498deb1aa3ae914d0619f13390b77215d26ad2656d9f179e9e04cf
CVE-2026-101767BrotliCISA KEVChina-linked-threat-actorEPICSGoAheadHiveNefilimNode2ShellOracle EBSSQL injectionTLSactive-exploitationbrowser-securityfirewallsindustrial-control-systemsransomwareremote-code-executionvulnerability-management
What happened
SecurityWeek RSS digest covering ransomware sentencing, major browser security updates, exploitable vulnerabilities in GoAhead, Oracle EBS, Node.js/Brotli, and EPICS control software, as well as active exploitation by China-linked actors. The most urgent items are the unauthenticated Oracle EBS SQL injection enabling remote code execution and the Node2Shell/Brotli vulnerability added to CISA’s Known Exploited Vulnerabilities catalog.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- fb7f427504498deb1aa3ae914d0619f13390b77215d26ad2656d9f179e9e04cf
- Enrichment time
- 2026-10-28T19:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.