Week in review: SimpleHelp vulnerability exploited, Oracle EBS Payments flaw under attack

A weekly security roundup covering a range of active threats and research: multiple vulnerabilities and exploitation activity (SimpleHelp leading to Djinn Stealer, Oracle Payments, PTC Windchill webshells), large-scale protocol flaws in AirDrop/Quick Share, phishing campaigns targeting Microsoft 365 and invoice scams, AI-related security risks (prompt injection, AI-assisted pentesting), and other tooling and product updates relevant to defenders.