ShinyHunters hackers expanded attacks on Oracle’s PeopleSoft, Google says
Google said the hackers bypassed earlier defenses and are targeting unpatched systems, with attacks now affecting dozens of organizations across multiple sectors.
- On Friday, Google's cybersecurity unit reported that hacking group ShinyHunters has renewed "mass exploitation" of a security flaw in Oracle's PeopleSoft software, bypassing defenses implemented after summer attacks.
- Mandiant reported that hackers adapted to defensive guidance published after the May-June attacks, targeting organizations that implemented firewall rules but failed to apply Oracle's critical PeopleSoft security patch.
- ShinyHunters claimed the latest attack affected dozens of global systems across healthcare and government sectors; the group previously alleged it accessed Federal Bureau personnel data and sensitive records.
- In a statement issued Wednesday, the FBI said it was "aggressively investigating" the reported breach, though Reuters has not been able to corroborate the hacker's claims.
- Oracle did not respond to requests for comment regarding the renewed exploitation, while researchers continue evaluating the security compromise's extent across affected global systems.
37 Articles
37 Articles
Security risks are increasing as software gaps are exploited, as this article highlights the Oracle PeopleSoft gap and how to address it. Warning against exploiting a hole in Oracle PeopleSoft. Google issued a warning about a renewed collective exploitation of a known security gap in Oracle PeopleSoft, as part of a worldwide campaign targeting several sectors.
ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers.
ShinyHunters hackers expanded attacks on Oracle's PeopleSoft, Google says
Google's cybersecurity unit said on Friday that hacking group ShinyHunters has renewed "mass exploitation" of a security flaw in Oracle's PeopleSoft software, after skirting defenses put up following attacks in the summer.
ShinyHunters hackers expanded attacks on Oracle’s PeopleSoft, Google says
Sept 25 (Reuters) - Google's cybersecurity unit said on Friday that hacking group ShinyHunters has renewed "mass exploitation" of a security flaw in Oracle's PeopleSoft software, after skirting defenses put up following attacks in the summer. Mandian...
Coverage Details
Bias Distribution
- 56% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
