Breach, Data Security, Patch/Configuration Management, Vulnerability Management

Oracle fixes WebLogic bug; 11g flaw exposed

Oracle on Thursday released a fix for a zero-day vulnerability in its WebLogic Node Manager. The publicly released bug can allow an attacker to fully compromise a targeted server on Windows, according to an Oracle blog post. The patch does not appear to be related to researcher David Litchfield's talk this week at the Black Hat conference in Washington, D.C., where he revealed how zero-day vulnerabilities in the Oracle 11g database could be used to bypass security and take complete control of the popular software. — DK

Related

Over 70M purportedly compromised in PowerSchool hack

Infiltration of PowerSchool's student information systems via stolen customer support portal credentials has primarily impacted the Toronto District School Board, which had data from over 1.48 million students and over 90,000 teachers exfiltrated, followed by the Peel District School Board, which is also in Canada, and the Dallas Independent School District.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

Related Terms

Attack VectorBitBugByteChecksumCryptanalysisCyclic Redundancy Check (CRC)Data Loss Prevention (DLP)Diffie-HellmanDigital Signature Algorithm (DSA)

You can skip this ad in 5 seconds