Mirage2FA hits 4,500 orgs; Oracle Weblogic RCE, NVIDIA AI poisoning, WordPress plugin flaws

This briefing synthesizes multiple high‑severity threats: a widespread Mirage2FA phishing‑as‑a‑service campaign compromising ~4,500 organizations via Microsoft 365 login spoofing; an unauthenticated NVIDIA NemoClaw/Ollama vector enabling persistent model poisoning; Oracle HTTP Server/WebLogic improper access control (CVE-2026-21962) added to CISA KEV with an urgent patch deadline; and MiniOrange SAML WordPress authentication bypasses — plus related DDoS and voice‑AI phishing activity — and provides prioritized mitigation actions (patching, log review, API isolation, and user training).