Oracle WebLogic Server

There were lots and lots of things built around that.

IBM WebSphere, BEA WebLogic.

These are tools that have existed for decades.

And that concept of an agent, a middleware that sits between the client and what's happening behind the scenes, we're not seeing that in an AI space yet.

We'll continue with the US on Thursday of last week seizing two hacking tools built by Beijing-based Integrity Technology Group and used primarily by Flex Typhoon against critical infrastructure organizations in the US and abroad, and a joint advisory released alongside the seizure is worth pulling and reading in full if you operate in any of the named target sectors.

MicroScan is a Python-based vulnerability scanning platform with more than thirteen hundred penetration testing scripts targeting Apache Struts, Juniper ScreenOS, Jenkins, OpenSSL, Oracle, Rajudo, HFS, WebLogic Server, WordPress, and others.

It's been active since at least twenty seventeen.

Integrity Tech also used a Mirai botnet to extend MicroScan's reconnaissance reach, which hits a US power company, NGOs, airports in Japan and Poland, and Taiwanese critical infrastructure and universities.

Penetration testing scripts for scanning websites.

Targets include OpenSSL, Oracle WebLogic Server, Regetto HFS, WordPress, Juniper ScreenOS, Jenkins, and Apache Struts.

Nine years with the same tool, and the advisory shows a micro-scan dashboard with accounts, detected vulnerabilities, and results by site.

You know, at that point, that's not just a script, that's a product.

Yep.

They were automating scans against targets for vulnerabilities in OpenSSL, WordPress, Oracle WebLogic, Apache Struts.

And they had a separate platform called FishHub designed specifically for spear phishing and deploying payloads.

Which we know was used to hit, what, 20 different Taiwanese universities?

Now that wasn't an enhancement, but it was a, a classic product management led thing.

where we have Oracle database, Oracle WebLogic server, a couple of the other Oracle Fusion middleware things we bundled together.

We had previously done that deal with IBM as JD Edwards to make the technology piece a no-brainer for you all, make it easy for customers to buy.

And when we were acquired by Oracle, this was back in 2006, I said, well, gee, Oracle has a database.