✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

CoinMiner Malware – Active IOCs

July 17, 2025
Rewterz

Multiple Adobe Products Vulnerabilities

July 17, 2025

Multiple Oracle Products Vulnerabilities

Severity

High

Analysis Summary

CVE-2025-53028 CVSS:8.2

An unspecified vulnerability in Oracle VM VirtualBox related to the Core component could allow a local authenticated attacker to cause high confidentiality impact, high integrity impact, and high availability impact.

CVE-2025-53024 CVSS:8.2

An unspecified vulnerability in Oracle VM VirtualBox related to the Core component could allow a local authenticated attacker to cause high confidentiality impact, high integrity impact, and high availability impact.

CVE-2025-50062 CVSS:8.1

An unspecified vulnerability in Oracle PeopleSoft Enterprise HCM Global Payroll Core related to the Global Payroll for Core component could allow a remote authenticated attacker to cause high confidentiality impact and high integrity impact.

CVE-2025-53027 CVSS:8.2

An unspecified vulnerability in Oracle VM VirtualBox related to the Core component could allow a local authenticated attacker to cause high confidentiality impact, high integrity impact, and high availability impact.

Impact

  • Gain Access

Indicators of Compromise

CVE

  • CVE-2025-53028

  • CVE-2025-53024

  • CVE-2025-50062

  • CVE-2025-53027

Affected Vendors

Oracle

Affected Products

  • Oracle VM VirtualBox 7.1.10
  • Oracle PeopleSoft Enterprise HCM Global Payroll Core 9.2.51
  • Oracle PeopleSoft Enterprise HCM Global Payroll Core 9.2.52

Remediation

Refer to the Oracle Critical Patch Update Advisory for patch, upgrade or suggested workaround information.

Oracle Critical Patch Update Advisor

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo