Attackers probe patched Oracle EBS bug; PeopleSoft zero-day is three flaws
ShinyHunters used CVE-2026-35273 for theft and extortion; ZDI says Oracle bundled three PeopleSoft bugs under one CVE.
2
Stories per day · 30 days
5 RSS
Relatedoracle4shinyhunters4ssrf2zero-day2arrest1critical-patch-update1e-business-suite1extortion1fbi1incident-response1java-se1kev1mysql1ransomware1rce1sql-injection1weblogic1
38 stories, newest first · one card per story
Stories tagged #peoplesoft
ShinyHunters PeopleSoft zero-day is three flaws under CVE-2026-35273
Unauthenticated SSRF to the loopback-trusted admin hub yields code execution on PeopleTools 8.61 and 8.62.
1
ShinyHunters mass-exploits PeopleSoft SSRF-to-RCE bug CVE-2026-35273
A gateway request forgery can satisfy localhost trust checks and reach a file-write path to code execution.
3
Oracle October 2026 CPU lists flaws across dozens of products
The October 20 notice names JD Edwards, MySQL, Java SE, WebLogic, PeopleSoft and many other lines, without CVE details.
1
When Your Ransomware Negotiator Works for the Other Side
FBI arrested ransomware negotiator Edward Dubrovsky on extortion charges tied to ShinyHunters, which also stole FBI employee data.
3
Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
FBI arrested Canadian expert Edward Dubrovsky over alleged ShinyHunters extortion, including an FBI systems intrusion.
1
FBI Arrests Another Suspected ShinyHunters Hacker Linked to FBIJobs.gov Breach
The FBI arrested another suspected ShinyHunters member linked to the FBIJobs.gov breach of employee personal data.
3
FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack
FBI arrested an unnamed Canadian in Pennsylvania as another ShinyHunters suspect in the jobs-portal breach.
2
FBI arrests another suspected ShinyHunters hacker after agency breach
FBI arrested another suspected ShinyHunters member linked to the recent breach of an FBI jobs platform.
3
Accenture Contractor Removed After FBI Data Breach Exposes Thousands of Employees
FBI removed an Accenture contractor after a PeopleSoft breach exposed thousands of employees' sensitive data.
Another ShinyHunters suspect arrested
Authorities arrested a teenage ShinyHunters suspect in Jordan, the second member detained after a Dutch arrest.
1
Despite ShinyHunters arrests after FBI jobs data breach, enterprises still have no answers about PeopleSoft risks
PeopleSoft customers lack vendor guidance as ShinyHunters claims a second zero-day after the confirmed FBI breach.
5
Detained ShinyHunters hacker reportedly helping FBI track down fellow members
Jordan detained alleged ShinyHunters member Rey, who is reportedly cooperating with the FBI against the group.
2
ShinyHunters Member Detained in Jordan, Reportedly Helping FBI Identify Fellow Hackers
Jordan detained alleged ShinyHunters member Saif al-Din Khader, reportedly helping the FBI identify other hackers.
1
FBI tells ShinyHunters members to turn themselves in after recent arrest
Dutch police arrested an alleged ShinyHunters leader; FBI warned remaining members to surrender after 140+ breaches and $70 million extorted.
2
Dutch Police Arrest Convicted Hacker in ShinyHunters Investigation
Dutch police arrested a 24-year-old Amsterdam suspect, identified as Pepijn van der Stap, in the ShinyHunters investigation.
2
ShinyHunters exploiting workarounds for Oracle PeopleSoft bug, Mandiant warns
Mandiant says ShinyHunters is again exploiting unpatched Oracle PeopleSoft flaw CVE-2026-35273, including after workarounds.
3
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Dutch police arrested convicted hacker Pepijn van der Stap ('Umbreon') for aiding ShinyHunters, whose members then breached the FBI job site and extorted Cl0p.
2
FBI reportedly declares ‘cyber security incident’ after hackers steal agents’ personal data
The FBI told staff ShinyHunters stole agents' personal data, including Social Security numbers, from its job portal.
3
FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day
FBI job portals stay offline after ShinyHunters claimed a PeopleSoft zero-day breach of personnel data.
3
Oracle PeopleSoft Servers Targeted Again as ShinyHunters Expands Extortion Operations
ShinyHunters-linked UNC6240 is mass-exploiting Oracle PeopleSoft CVE-2026-35273, bypassing WAF path filters for extortion.
2
Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign
ShinyHunters (UNC6240) resumed mass-exploiting Oracle PeopleSoft via a WAF-bypassing variant of CVE-2026-35273, deploying web shells and SideEye to extort victims.
4
ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
ShinyHunters bypasses WAF rules blocking PeopleSoft CVE-2026-35273 via percent-encoding, resuming RCE attacks deploying web shells and SIDEEYE backdoors.
4
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells
UNC6240 bypasses WAFs to mass-exploit Oracle PeopleSoft CVE-2026-35273 and deploy web shells and SIDEEYE.
5