Nissan discloses employee data breach linked to Oracle zero-day attacks:

bleepingcomputer.com/news/security/hackers-now-scanning-systems-for-recently-patched-oracle-flaw/

Credibility A−

Oct 28

Hackers now scanning systems for recently-patched Oracle flaw: Attackers have begun probing the Internet for systems unpatched against a recently disclosed ...

theregister.com/security/2026/10/28/oracle-celebrates-end-of-cybersecurity-awareness-month-with-quadruple-trouble/5306121

dlvr.it Oct 28

Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble: Attackers probe another EBS bug, and ShinyHunters' PeopleSoft 0-day turns out to ...

qz.com/fbi-accenture-contractor-shinyhunters-data-breach-100626

Quartz

B+

Oct 07

FBI removed an Accenture contractor after a data breach exposed thousands of employees' records

bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/

Sep 26

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks: The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall ...

5 similar articles

PCMag

Sep 21

Hacker-on-Hacker Crime: ShinyHunters Is Trying to Extort CLOP Ransomware Group: Cybercriminal group ShinyHunters claims to have hijacked the website of a rival ...

pcmag.com/news/hacker-on-hacker-crime-shinyhunters-is-trying-to-extort-clop-ransomware

6 similar articles

bleepingcomputer.com/news/security/est-e-lauder-discloses-data-breach-via-oracle-e-business-flaw/

Jul 21

Estée Lauder discloses data breach via Oracle E-Business flaw: Cosmetics giant Estée Lauder is notifying customers of a data breach after hackers exploited a ...

bleepingcomputer.com/news/security/naic-says-public-data-stolen-in-shinyhunters-peoplesoft-breach/

Jun 29

NAIC says public data stolen in ShinyHunters' PeopleSoft breach: The National Association of Insurance Commissioners (NAIC) says the ShinyHunters extortion ...

theregister.com/security/2026/06/29/nissan-says-oracle-peoplesoft-break-in-may-have-spilled-payroll-records-ssns/5263534

dlvr.it Jun 29

Nissan says Oracle PeopleSoft break-in may have spilled payroll records, SSNs: Carmaker points finger at an 'unknown' flaw as customer fallout continues

theregister.com/cyber-crime/2026/06/15/council-of-europe-hacked-in-shinyhunters-peoplesoft-heist/5255757

0 15

dlvr.it Jun 15

Council of Europe hacked in ShinyHunters' PeopleSoft heist: Joins the ranks of Nottingham Uni and 100 other unnamed victims

heise.de/news/Cybergang-ShinyHunters-attackiert-Oracle-PeopleSoft-Schwachstelle-11331861.html

0 1

heise online

Jun 15

Cyber gang ShinyHunters attacks Oracle PeopleSoft vulnerability: The criminal group ShinyHunters is attacking the critical security vulnerability in Oracle ...

Key FactsShinyHunters Apparently Targets Oracle PeopleSoft Flaw

Jun 15, 2026 · Reading time: ~30 sec.
Summary created with AI assistance · Source: heise.de

According to Oracle, CVE-2026-35273 enables unauthenticated code execution through HTTP and carries a critical CVSS score of 9.8.

Mandiant says ShinyHunters, also known as UNC6240, has exploited the flaw for extortion attacks since May 27, 2026.

The US agency CISA added the vulnerability to its catalog of known exploited vulnerabilities.

Mandiant contacted more than 100 organizations worldwide whose IP addresses correlated with vulnerable endpoints; slightly over two-thirds of US organizations were in higher education.

Benzinga

B+

Jun 13

Google Sounds Alarm On Active Oracle PeopleSoft Zero-Day Attacks Linked To ShinyHunters - Alphabet (NASDA

benzinga.com/markets/tech/26/06/53161062/google-sounds-alarm-on-active-oracle-peoplesoft-zero-day-attacks-linked-to-shinyhunters

arstechnica.com/security/2026/06/peoplesoft-0-day-affecting-hundreds-of-organizations-steals-gigabytes-of-data/

Ars Technica

Jun 12

PeopleSoft 0-day affecting hundreds of organizations steals gigabytes of data: Vulnerability in the Oracle-owned PeopleSoft software is about as critical as they ...

techcrunch.com/2026/06/11/oracle-warns-of-security-bug-that-hackers-abused-to-breach-100-companies/

1 1

TechCrunch

B+

Jun 11

Oracle warns of security bug that hackers abused to breach 100+ companies: The tech giant warned of a security flaw that a cybercrime gang said it's ...

theregister.com/cyber-crime/2026/06/11/shinyhunters-claims-oracle-peoplesoft-0-day-hit-100-orgs/5254443

0 9

dlvr.it Jun 11

ShinyHunters claims Oracle PeopleSoft 0-day hit 100+ orgs: University of Nottingham is first of many, Shiny tells The Reg

3 similar articles

0 2

bleepingcomputer.com/news/security/nottingham-university-data-breach-affects-over-450-000-students/

Jun 11

Nottingham University data breach affects over 450,000 students: The University of Nottingham confirmed on Wednesday that a hacking group gained access to its ...

1 similar article

0 6

bleepingcomputer.com/news/security/barts-health-nhs-discloses-data-breach-after-oracle-zero-day-hack/

Dec 05 25

Barts Health NHS discloses data breach after Oracle zero-day hack: Barts Health NHS Trust has announced that Clop ransomware actors have stolen files from a ...

0 0

bleepingcomputer.com/news/security/cox-enterprises-discloses-oracle-e-business-suite-data-breach/

Nov 22 25

Cox Enterprises discloses Oracle E-Business Suite data breach: Cox Enterprises is notifying impacted individuals of a data breach that exposed their personal ...