The article highlights two active threats: a zero-day vulnerability in Check Point VPNs being actively exploited in the wild, and attacks targeting Oracle PeopleSoft servers. Specific technical details regarding the attack vectors, CVSS scores, affected versions, patches, or workarounds for these incidents are not provided in the source text.
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: DockSec: Open-source AI-powered Docker security scanner DockSec is an OWASP Incubator Project that combines three container security scanners with a language-model layer for explanation and remediation. Created by Advait Patel, the Python tool runs Trivy, Hadolint, and Docker Scout against a developer’s Dockerfile and image, correlates the findings, returns a 0-100 security score, and proposes line-specific fixes. Treating AI agents … More → The post Week in review: Exploited Check Point VPN zero-day, Oracle PeopleSoft servers under attack appeared first on Help Net Security .