Neo-reGeorg

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenSep 21, 2026
Last mentionedSep 28, 2026

Timeline

3 articles · newest first

Oracle PeopleSoft Servers Targeted Again as ShinyHunters Expands Extortion Operations

ShinyHunters-linked UNC6240 is mass-exploiting Oracle PeopleSoft CVE-2026-35273, bypassing WAF path filters for extortion.

GBHackersSep 28, 11:36 UTC · Sep 28, 2026Threat actorExploitedCVE-2026-352732 · 1 read

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

UNC6240 bypasses WAFs to mass-exploit Oracle PeopleSoft CVE-2026-35273 and deploy web shells and SIDEEYE.

The Hacker NewsSep 26, 11:46 UTC · Sep 26, 2026Exploit / PoCExploitedCVE-2026-352735 · 2 reads

NightEagle Uses BlueKeep and DCSync to Move Toward Active Directory Domain Controllers

NightEagle espionage group used GhostContainer, BlueKeep exploitation, and DCSync attempts to compromise Russian organizations and target Active Directory controllers.

GBHackersSep 21, 13:27 UTC · Sep 21, 2026Threat actorExploitedCVE-2020-0688 CVE-2019-07083 · 2 reads

Related CVEs

by mentions

CVE-2026-3527397%9.8
Unauthenticated Takeover Flaw in Oracle PeopleSoft Enterprise PeopleTools
published Jun 11, 2026Oracle PeopleSoft Enterprise PeopleTools (Updates Environment Management component)KEVRansomwarePoC
CVE-2019-0708100%9.8
Unauthenticated RCE in Microsoft Remote Desktop Services (BlueKeep)
published May 16, 2019Microsoft Remote Desktop ServicesKEVRansomwarePoC ×4
CVE-2020-0688100%8.8
RCE in Microsoft Exchange Server from Shared Install-Time Validation Keys
published Feb 11, 2020Microsoft Exchange ServerKEVRansomwarePoC ×2

Appears with

Mandiantorganization · 2
ShinyHuntersthreat actor · 2
SIDEEYEmalware · 2
Oraclevendor · 2
UNC6240threat actor · 2
GnosticPlayersthreat actor · 1
FBIvictim · 1
PeopleToolsproduct · 1
Russian organizationsvictim · 1
Microsoft Exchangeproduct · 1
GhostContainermalware · 1
NightEagleorganization · 1
Active Directoryproduct · 1
PeopleSoftproduct · 1
NightEaglethreat actor · 1
APT-Q-95threat actor · 1

Entities are extracted by the model from each article. First seen Sep 21, 2026, last mentioned Sep 28, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.