Digital.Nhs.Uk Oracle Identity Manager RCE Vulnerability Exploited in Active Attacks
Article Content
Browse articles 
A critical vulnerability in Oracle Identity Manager, tracked as CVE-2025-61757, allows remote code execution (RCE) without authentication. Discovered by Searchlight Cyber researchers, the flaw has been actively exploited in attacks, prompting warnings from CISA for government agencies to apply the patch released by Oracle on October 21, 2025.
Ask AI about this cluster
Answers cite the sources they use
Updated 218d ago How this analysis works
More articles in this cluster (19)
Following this threat?
Track Cl0p, Allianz UK and CVE-2021-35587 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
ShinyHunters Claims Major Data Breach of FBI Systems The hacking group ShinyHunters has claimed responsibility for breaching FBI systems, asserting that they stole sensitive data on nearly all FBI employees and job applicants. The attack reportedly exploited a zero-day vulnerability in Oracle's PeopleSoft, allowing remote code execution. ShinyHunters claims to have… 
Dutch Hacker Arrested in ShinyHunters Investigation Following FBI Breach Dutch authorities arrested Pepijn van der Stap, a 24-year-old previously convicted hacker, on September 15, 2026, as part of an investigation into the ShinyHunters hacking group. This group claimed responsibility for a significant breach of the FBI's job application site, reportedly stealing sensitive data from over…