BRIEFOtherhighP78
Public exploit for critical RCE in Oracle WebLogic Proxy Plug-in (CVE-2026-21962)
Oracle WebLogic Proxy Plug-in
Detected26 August 2026 · 19:15 UTC
A working exploit for a critical remote code execution vulnerability in Oracle WebLogic Proxy Plug-in (CVE-2026-21962) was published on a Russian underground forum. WebLogic is widely deployed in enterprise and government environments, including Latin America, making this a potential initial access vector. Organizations should validate exposure and apply the vendor patch immediately.
CategoryOther
Severityhigh
Priority score78
Detected26 August 2026 · 19:15 UTC
Other● 42
Herramienta de evasión de KYC y documentos falsos para Sumsub, Onfido y otrosA tool automating KYC bypass and fake document creation is circulating on Cracked.st, explicitly targeting Sumsub, Onfido, Persona, Jumio, IDnow and Ondato. These providers underpin onboarding and identity checks at many banks and fintechs across Latin America, so the tool undermines a core financial-crime control. Fraud and onboarding teams should expect increased synthetic-identity and account-opening abuse.Other● 42
Doxeo del expresidente mexicano Andrés Manuel López ObradorA forum user posted a dox of former Mexican president Andrés Manuel López Obrador. Although this is personal data rather than a system compromise, doxing of a former head of state signals political targeting and can enable harassment or identity fraud. It is worth tracking as LATAM political-risk intelligence.Other● 38
Comprador busca enriquecimiento y búsqueda de datos personales de BrasilA buyer is soliciting Brazilian personal-data enrichment and lookup services, indicating active demand for Brazilian PII on underground markets. While not a leak itself, it shows targeting of Latin American data and could precede downstream fraud. Worth tracking for LATAM-focused activity.Other● 68
Venta de 20 exploits de día cero para el kernel de WindowsDarkForums seller Jumpa is offering 20 zero-day exploits targeting Windows kernel drivers, in a post dated early October 2026. Kernel-level bugs enable privilege escalation and full host compromise, and once sold they can be weaponized against unpatched government and enterprise endpoints. Windows estate owners should prioritize kernel hardening, exploit detection and rapid patch monitoring.Other● 45
Venta de herramienta para eludir verificación KYC bancariaA seller on Cracked.st offers a KYC-bypass and document-forgery toolkit claiming to defeat major identity vendors including Sumsub, Onfido, Persona, Jumio, Idnow, Veriff and Ondato. This directly enables fraudulent account opening and money laundering at banks and fintechs relying on those providers. Defenders should expect forged onboarding attempts and tighten document and liveness checks.Other● 42
FBI advierte sobre ataques FortiBleed contra VPNs FortiGateA darknet news repost relays an FBI advisory about ongoing 'FortiBleed' attacks that lock out administrators of FortiGate SSL-VPN appliances, an edge device widely deployed in government, telecom and critical-infrastructure networks. Defenders relying on FortiGate VPNs for remote access should patch urgently, hunt for persistence and rotate credentials. No Latin American victim is named yet, but the campaign is global and directly relevant to AR/LATAM perimeter security.