Top 5 Cybersecurity News

A heavy steel door standing open in a dark concrete wall, with a thin blue light along its hinges

This week’s Top 5 Cybersecurity News for October 30, 2026 is about assumptions nobody re-checked. A Japanese hosted-desktop service held customers’ saved trading logins on servers attackers could reach, after its own staff had flagged weaknesses. A VMware ESXi flaw scored 2.7 on the CVSS scale was used as a zero-day to keep administrator actions…

Read More

Oracle E-Business Suite CVE-2026-46817 Actively Exploited

Oracle E-Business Suite CVE-2026-46817

Oracle E-Business Suite CVE-2026-46817, a critical flaw, is under active exploitation: an unauthenticated attacker with nothing more than HTTP access can take over Oracle Payments — the module that executes your payment runs. CISA added the flaw to its Known Exploited Vulnerabilities catalog on July 15 and gave US federal agencies three days to fix…

Read More