2026-06-12 05:29 JST / The Hacker News / MEDIUM Summary: ShinyHunters (UNC6240) exploited an unpatched Oracle PeopleSoft zero-day CVE-2026-35273 (CVSS 9.8, affecting PeopleTools 8.61/8.62). This ...

Oracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as CVE-2026-35273 that allows unauthenticated remote code execution, with the flaw actively exploited in ShinyHunter ...

A 14-day window between exploitation and Oracle's advisory left insurers and regulators with no patch and no warning ...

Oracle PeopleSoft servers are being targeted in ongoing data theft attacks by the ShinyHunters extortion gang, which claims to have stolen data from over 100 organizations. PeopleSoft is an enterprise ...

Oracle issued emergency guidance for CVE-2026-35273, a critical PeopleSoft flaw exploited in a ShinyHunters-linked campaign targeting universities.

One of the world’s most active ransomware groups exploited a critical vulnerability in Oracle’s PeopleSoft software suite and used it to target about 100 customers and extort at least one of them to ...

The notorious cybercrime group ShinyHunters claimed to have hacked Oracle PeopleSoft servers at more than 100 organizations, many of them universities, a ShinyHunters member told TechCrunch on ...

Attackers leveraged a critical unauthenticated RCE bug to breach higher‑ed institutions, deploy stealth remote access tools, and publish stolen data. A newly disclosed Oracle PeopleSoft zero-day ...

The cybercrime group ShinyHunters has claimed responsibility for a wave of data theft attacks targeting Oracle PeopleSoft servers at more than 100 organisations, the majority of them universities. The ...

If you or your company uses Oracle’s PeopleSoft software, then you might want to take note of a recent security advisory published by the company. According to Oracle, they’re warning of a security ...