Technology

Art

Oracle warns of critical PeopleSoft vulnerability exploited in mass-hacking campaign affecting 100+ organizations

Lorenzo Franceschi-Bicchierai

25d ago· 3 min readenNews

technology cybersecurity business enterprise software

Summary

Oracle has warned corporate customers about a critical vulnerability in its PeopleSoft software (used for payroll and HR management) after the hacking group ShinyHunters claimed to have breached over 100 organizations by exploiting the flaw. Mandiant (Google's security unit) confirmed the vulnerability and noted that Google notified more than 100 potentially affected organizations. The advisory was published a day after the cybercrime group took credit for the mass-hacking campaign.

Source

bskyOracle warns of critical PeopleSoft vulnerability exploited in mass-hacking campaign affecting 100+ organizationsbuff.ly

Key quotes

· 3 pulled

Oracle warned its corporate customers that there is a critical-rated vulnerability in its PeopleSoft software

The hacking group ShinyHunters claimed to have breached more than 100 organizations that use PeopleSoft servers

Mandiant, the Google-owned security unit that investigates cyberattacks, warned in a blog post that the new Oracle flaw is the same

Snippet from the RSS feed

The tech giant warned of a security flaw that a cybercrime gang said it's exploiting as part of a mass-hacking campaign. Google said it notified more than 100 organizations that had potentially vulnerable servers.

You might also wanna read

Google Confirms Data Breach in Salesforce CRM Theft Campaign by ShinyHunters

Google has become the latest victim of a data breach in a series of Salesforce CRM data theft attacks orchestrated by the ShinyHunters extor

bleepingcomputer.com·11mo ago

CVE-2026-35273: Oracle PeopleSoft RCE Zero-Day Explained

picussecurity.com·4d ago

Hacking Group Threatens Google with Data Leak Unless Employees Are Fired

A hacking group has issued an ultimatum to Google, threatening to leak company databases unless Google fires two specific employees and susp

newsweek.com·10mo ago

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

thehackernews.com·7d ago

ShinyHunters defaces school Canvas login pages after Instructure data breach

Education tech company Instructure disclosed a data breach where hackers stole student names, emails, and teacher-student messages. The cybe

TechCrunch·2mo ago

Google Database Security Breach Puts 2.5 Billion Gmail Users at Risk of Scams

A hacker group has gained access to Google databases and is attempting to scam Gmail and Google Cloud users, potentially endangering 2.5 bil

pcworld.com·10mo ago

Comments

No comments yet. Be the first.