Oracle mitigates PeopleSoft zero-day exploited in data theft attacks:
Oracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked ...
bleepingcomputer.com/news/security/oracle-mitigates-peoplesoft-zero-day-exploited-in-data-theft-attacks/
Story Details
| Last Updated | |
| Total Articles | 1 |
Main Topics
growing phenomenon primarily caused by system administrators and office workers with access to technology such as database servers, desktop computers and a growing list of hand-held devices capable of
legal process whereby a person is put to death by the state as a punishment for an actual or supposed crime
Similar to This
Previous
BeyondTrust patches zero-day exploited in attacks since August: BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that ...
bleepingcomputer.com/news/security/beyondtrust-patches-zero-day-exploited-in-attacks-since-august/
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to ...
bleepingcomputer.com/news/security/cisa-warns-admins-to-immediately-fix-ivanti-flaw-exploited-as-zero-day/
ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks: The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall ...
bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/
dlvr.it Sep 25
ShinyHunters tells The Reg: We hacked the FBI to 'protect our business': Data theft and extortion biz, that is
theregister.com/cyber-crime/2026/09/25/shinyhunters-tells-the-reg-we-hacked-the-fbi-to-protect-our-business/5299250
Recently patched PaperCut zero-days used in data theft attacks: Two security vulnerabilities in the PaperCut NG and MF print management software ...
bleepingcomputer.com/news/security/recently-patched-papercut-zero-days-used-in-data-theft-attacks/
Cybersecurity: How a ransomware group is systematically dismantling PeopleSoft systems - | Golem.de
golem.de/news/cybersecurity-wie-eine-erpressergruppe-reihenweise-peoplesoft-systeme-abraeumt-2607-210692.html
Paid articlePaywall Nissan discloses employee data breach linked to Oracle zero-day attacks: Nissan is warning that it suffered a data breach affecting current and former employees ...
bleepingcomputer.com/news/security/nissan-discloses-employee-data-breach-linked-to-oracle-zero-day-attacks/
NAIC says public data stolen in ShinyHunters' PeopleSoft breach: The National Association of Insurance Commissioners (NAIC) says the ShinyHunters extortion ...
bleepingcomputer.com/news/security/naic-says-public-data-stolen-in-shinyhunters-peoplesoft-breach/
Cyber gang ShinyHunters attacks Oracle PeopleSoft vulnerability: The criminal group ShinyHunters is attacking the critical security vulnerability in Oracle ...
heise.de/news/Cybergang-ShinyHunters-attackiert-Oracle-PeopleSoft-Schwachstelle-11331861.html
Key FactsShinyHunters Apparently Targets Oracle PeopleSoft Flaw
Jun 15, 2026 · Reading time: ~30 sec.
Summary created with AI assistance · Source: heise.de
Summary created with AI assistance · Source: heise.de
- According to Oracle, CVE-2026-35273 enables unauthenticated code execution through HTTP and carries a critical CVSS score of 9.8.
- Mandiant says ShinyHunters, also known as UNC6240, has exploited the flaw for extortion attacks since May 27, 2026.
- The US agency CISA added the vulnerability to its catalog of known exploited vulnerabilities.
- Mandiant contacted more than 100 organizations worldwide whose IP addresses correlated with vulnerable endpoints; slightly over two-thirds of US organizations were in higher education.
Google Sounds Alarm On Active Oracle PeopleSoft Zero-Day Attacks Linked To ShinyHunters - Alphabet (NASDA
benzinga.com/markets/tech/26/06/53161062/google-sounds-alarm-on-active-oracle-peoplesoft-zero-day-attacks-linked-to-shinyhunters
PeopleSoft 0-day affecting hundreds of organizations steals gigabytes of data: Vulnerability in the Oracle-owned PeopleSoft software is about as critical as they ...
arstechnica.com/security/2026/06/peoplesoft-0-day-affecting-hundreds-of-organizations-steals-gigabytes-of-data/
dlvr.it Jun 11
ShinyHunters claims Oracle PeopleSoft 0-day hit 100+ orgs: University of Nottingham is first of many, Shiny tells The Reg
theregister.com/cyber-crime/2026/06/11/shinyhunters-claims-oracle-peoplesoft-0-day-hit-100-orgs/5254443
Nottingham University data breach affects over 450,000 students: The University of Nottingham confirmed on Wednesday that a hacking group gained access to its ...
bleepingcomputer.com/news/security/nottingham-university-data-breach-affects-over-450-000-students/
Hackers steal 1.8 terabytes of data from PC peripheral vendor Logitech — firm says zero-day vulnerability to blame, no sensitive information stolen
tomshardware.com/tech-industry/hackers-steal-1-8tb-of-data-from-pc-peripheral-vendor-logitech-firm-says-zero-day-vulnerability-to-blame-no-sensitive-information-stolen
Clop exploited Oracle zero-day for data theft since early August: The Clop ransomware gang has been exploiting a critical Oracle E-Business Suite (EBS) zero-day ...
bleepingcomputer.com/news/security/oracle-zero-day-exploited-in-clop-data-theft-attacks-since-early-august/
Next