Product

PeopleSoft

2 mentions in 7 days · 2 in 30 days · 2 total · first seen Sep 12, 2026 · last 15h ago

Timeline2 articles

Oracle Patches 800+ Vulnerabilities in September 2026 Security Update

Oracle's September 2026 Critical Patch Update fixes 800+ vulnerabilities, including over 100 critical flaws and 240+ remotely exploitable without authentication.

Oracle released 673 new security patches in its September 2026 Critical Security Patch Update, resolving 672 unique CVEs across 17 risk matrices plus 130+ additional CVEs. More than 100 flaws are critical severity and over 240 are remotely exploitable without authentication. Oracle E-Business Suite received the largest batch with 159 patches, followed by Fusion Middleware (153, including 78 unauthenticated remote flaws) and Hyperion (102). Oracle reports no exploitation of these specific flaws but warns attackers routinely exploit unpatched Oracle products.

SecurityWeekupdated 19:29 UTC · 4h agofirst 08:06 UTC · 15h agoAdvisory 3 sources

Beyond the Perimeter: Building Resilience Against Cloud and SaaS Supply-Chain Attacks

ShinyHunters exploited an Oracle PeopleSoft zero-day to steal data and extort roughly 100 organizations, including the Council of Europe, for up to $2.3M.

Between May and early June 2026, the ShinyHunters group exploited a critical zero-day in Oracle PeopleSoft across about 100 organizations and 300 instances worldwide, per reports cited by The Register. Stolen records included employee and student personal data, payroll, tax, financial and health information, plus immigration and passport documents. AgentCypher.ai estimates extortion demands of $400,000 to $2.3 million per victim, typically in Bitcoin; the Council of Europe refused to pay. The article uses the incident to argue for Zero Trust, supply-chain risk management, rapid patching, encrypted distributed backups and defined recovery-time objectives.

Cyber Security NewsSep 12, 10:46 UTC · 4d agoData breach in the wild1

Appears with

vendor Oracle 2 organization AgentCypher.ai 1 organization Council of Europe 1 organization Quantum Evolve 1 organization The Register 1 product Oracle Database 1 vendor Hyperion 1 vendor Java SE 1 vendor Oracle E-Business Suite 1 vendor Oracle Fusion Middleware 1 vendor PeopleSoft 1 vendor Siebel 1 threat actor ShinyHunters 1 victim Council of Europe 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.