A critical Oracle WebLogic flaw (CVSS 10.0) saw exploitation almost immediately after public exploit code was released.

CloudSEK observed automated scanning targeting this and older flaws via VPS infrastructure in a spray-and-pray campaign.

�� Full attack patterns → https://thehackernews.com/2026/03/weekly-recap-telecom-sleeper-cells-llm.html#:~:text=Exploitation%20Against%20Oracle%20WebLogic%20Servers