Exploited Zero-Days, AI Hacking, and Healthcare Cyberattacks Dominate News

Critical Vulnerabilities Under Active Exploitation:

• [UPDATE] Citrix Zero-Days and Oracle PeopleSoft Flaw Under Active Exploit: New research reveals CVE-2026-35273 is a chain of three vulnerabilities in Oracle PeopleSoft, enabling unauthenticated RCE. A critical workaround involves editing the allowedhosts.properties file.
• [UPDATE] PHP2Shell: Critical Flaws Trigger Emergency Patches, Mass Scans: A China-linked APT group is exploiting PHP2Shell in conjunction with a Linux kernel flaw to gain root access on firewalls, compromising at least 25 devices, including a U.S. government-affiliated organization.
• [NEW] CISA Adds Exploited Google Brotli and Adobe Commerce Flaws to KEV: CISA has added two actively exploited vulnerabilities, Node2Shell (CVE-2026-111497) in Google Brotli and a file upload flaw in Adobe Commerce/Magento (CVE-2026-48356), to its KEV catalog, mandating patching for federal agencies.

Emerging Threats and Industry Responses:

• [NEW] AI-Powered Hacking Tools Like CyberStrikeAI Used in Japan Attacks: Three cyberattack campaigns targeting Japanese organizations demonstrate the increasing use of AI in offensive operations, with one campaign leveraging CyberStrikeAI to automate the attack lifecycle.
• [NEW] GMO Internet Group Offers $1M Bounty After Refusing Ransom Demand: Following a breach of its 'Onamae.com Desktop Cloud' service, GMO Internet Group has launched a $1 million bounty program to identify attackers after refusing a $50 million ransom demand.

Healthcare Sector Under Pressure:

• [NEW] UNM Health Services Disrupted by Cyberattack, Extortion Group Claims Data Theft: The University of New Mexico Health system experienced a significant cyberattack causing major disruptions, with an extortion group claiming responsibility for data theft.

Policy and Investment News:

• [NEW] White House Launches 'Project Lifeline 250' to Secure Rural Hospitals: The White House has initiated a six-month pilot program to enhance the cybersecurity of underserved rural hospitals through public-private partnerships.
• [NEW] AI Security Startup Upwind Raises $400M, Valuation Soars to $3.8B: Upwind Security, an AI application security startup, has secured $400 million in Series C funding, reflecting strong investor interest in cloud and AI security solutions.