34 matches found
EUVD-2026-47253
Vulnerability in the Oracle Financials for the Americas product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-61035
Vulnerability in the Oracle Financials for the Americas product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-61035: Improper Access Control
Vulnerability in the Oracle Financials for the Americas product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...
PT-2026-62930
Vulnerability in the Oracle Financials for the Americas product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...
Darktrace Annual Threat Report 2026
The Darktrace Annual Threat Report 2026 reinforces a reality every CISO feels: the center of gravity isn't the perimeter, vulnerability management, or malware, but trust abused via identity. Their analysis found that nearly 70% of incidents in the Americas region begin with stolen or misused...
Mexico City Is the Most Video-Surveilled Metropolis in the Americas
Despite 83,000 public cameras, crime in Mexico City remains high—and widespread surveillance raises myriad ethical issues...
EvilAI Malware Masquerades as AI Tools to Infiltrate Global Organizations
Threat actors have been observed using seemingly legitimate artificial intelligence AI tools and software to sneakily slip malware for future attacks on organizations worldwide. According to Trend Micro, the campaign is using productivity or AI-enhanced tools to deliver malware targeting various...
FUJIFILM Healthcare Americas Synapse Mobility vulnerable to Privilege Escalation
Overview Synapse Mobility provided by FUJIFILM Healthcare Americas Corporation is vulnerable to privilege escalation. Privilege escalation vulnerability through external control of Web parameter CWE-472 - CVE-2025-54551 Christopher Alejandro Moroco reported this vulnerability to CISA ICS...
Malicious code in shared-nav-ia-region-americas (npm)
The package shared-nav-ia-region-americas was found to contain malicious code...
MAL-2025-33063 Malicious code in shared-nav-ia-region-americas (npm)
The package shared-nav-ia-region-americas was found to contain malicious code...
Google Exposes Vishing Group UNC6040 Targeting Salesforce with Fake Data Loader App
Google has disclosed details of a financially motivated threat cluster that it said "specializes" in voice phishing aka vishing campaigns designed to breach organizations' Salesforce instances for large-scale data theft and subsequent extortion. The tech giant's threat intelligence team is tracki...
China’s FamousSparrow APT Hits Americas with SparrowDoor Malware
China-linked APT group FamousSparrow hits targets in the Americas using upgraded SparrowDoor malware in new cyberespionage campaign, ESET reports...
Malicious code in abb-americas (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1712 Malicious code in abb-americas (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @abb-americas/image-scaler (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @abb-americas/angular-utilities (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @abb-americas/angular-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Metamorfo Banking Trojan Targets the Americas
...
Researchers Detail Multistage Attack Hijacking Systems with SSLoad, Cobalt Strike
Cybersecurity researchers have discovered an ongoing attack campaign that's leveraging phishing emails to deliver a malware called SSLoad. The campaign, codenamed FROZENSHADOW by Securonix, also involves the deployment of Cobalt Strike and the ConnectWise ScreenConnect remote desktop software...
summit-americas.org Cross Site Scripting vulnerability OBB-3839889
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...