Technology

Art

Oracle warns of critical PeopleSoft vulnerability exploited in mass-hacking campaign affecting 100+ organizations

Lorenzo Franceschi-Bicchierai

25d ago· 3 min readenNews

technology cybersecurity business enterprise software

Summary

Oracle issued a critical security advisory for a vulnerability in its PeopleSoft software (used for payroll and HR management) after the hacking group ShinyHunters claimed to have breached over 100 organizations by exploiting the flaw. Google-owned Mandiant confirmed the vulnerability is actively being exploited in a mass-hacking campaign, and Google notified more than 100 potentially vulnerable organizations.

Source

bskyOracle warns of critical PeopleSoft vulnerability exploited in mass-hacking campaign affecting 100+ organizationstechcrunch.com

Key quotes

· 3 pulled

Oracle warned its corporate customers that there is a critical-rated vulnerability in its PeopleSoft software

The hacking group ShinyHunters claimed to have breached more than 100 organizations that use PeopleSoft servers

Mandiant, the Google-owned security unit that investigates cyberattacks, warned in a blog post that the new Oracle flaw is the same b

Snippet from the RSS feed

The tech giant warned of a security flaw that a cybercrime gang said it's exploiting as part of a mass-hacking campaign. Google said it notified more than 100 organizations that had potentially vulnerable servers.

You might also wanna read

Google Confirms Data Breach in Salesforce CRM Theft Campaign by ShinyHunters

Google has become the latest victim of a data breach in a series of Salesforce CRM data theft attacks orchestrated by the ShinyHunters extor

bleepingcomputer.com·11mo ago

CVE-2026-35273: Oracle PeopleSoft RCE Zero-Day Explained

picussecurity.com·4d ago

Hacking Group Threatens Google with Data Leak Unless Employees Are Fired

A hacking group has issued an ultimatum to Google, threatening to leak company databases unless Google fires two specific employees and susp

newsweek.com·10mo ago

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

thehackernews.com·7d ago

ShinyHunters defaces school Canvas login pages after Instructure data breach

Education tech company Instructure disclosed a data breach where hackers stole student names, emails, and teacher-student messages. The cybe

TechCrunch·2mo ago

Global Cyberattack Exploits Microsoft SharePoint Vulnerability, Targets Government Agencies and Businesses

Hackers exploited a major security vulnerability in Microsoft's SharePoint collaboration software to launch a global cyberattack targeting U

washingtonpost.com·11mo ago

Comments

No comments yet. Be the first.