TrendAI
CompanyThreat actors named alongside
Source: RedTeamDaily stories that mention bothSecurity timeline
- Malware reported by The Register (Security)Police and security firms disrupt XCPE backdoor behind botnet of 1.3 million Android TV boxes
- Vulnerability reported by Horizon3.aiAttackers probe critical Oracle E-Business Suite flaw CVE-2026-101767 after October patch
Recent news
Police and security firms disrupt XCPE backdoor behind botnet of 1.3 million Android TV boxes
A coalition of security firms working with Japan's National Police Agency has disrupted XCPE, a backdoor pre-installed in firmware by Shenzhen hardware maker Videostrong Technology. It formed a botnet of over 1.3 million Android devices that operators used as proxies, and the coalition has also taken down command-and-control domains used by affiliate modules, which Google estimates could sever access to at least 10 million more compromised devices. Google has cut ties with Videostrong and banned it from shipping devices with preloaded Google apps.
Attackers probe critical Oracle E-Business Suite flaw CVE-2026-101767 after October patch
CVE-2026-101767 is an unauthenticated SQL injection in Oracle E-Business Suite's Thin Client Framework servlet that chains to remote code execution, with a CVSS score of 9.8. Oracle patched it in its October 2026 Critical Patch Update, and Defused Cyber decoys recorded exploratory exploitation on 27 October. The Canadian Centre for Cyber Security has updated its advisory to say open source reporting indicates exploitation in the wild.