#unc6240

0 stories this week · 0 this month · 5 in 6 months · mostly security

Stories per day · 30 days

5 stories, newest first · one card per story

Cyber Security NewsSep 28, 2026critical

ShinyHunters Bypasses WAF Protections to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

ShinyHunters resumed mass exploitation of Oracle PeopleSoft CVE-2026-35273, bypassing WAFs via percent-encoded paths and deploying web shells and the SIDEEYE backdoor.

2 sourcesExploited5 min readshinyhunters unc6240

GBHackersSep 28, 2026high

Oracle PeopleSoft Servers Targeted Again as ShinyHunters Expands Extortion Operations

ShinyHunters-linked UNC6240 is mass-exploiting Oracle PeopleSoft CVE-2026-35273, bypassing WAF path filters for extortion.

Exploited5 min readoracle peoplesoft

SecurityWeekSep 28, 2026critical

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign

ShinyHunters (UNC6240) resumed mass-exploiting Oracle PeopleSoft via a WAF-bypassing variant of CVE-2026-35273, deploying web shells and SideEye to extort victims.

Exploited3 min readoracle peoplesoft

The Hacker NewsSep 26, 2026critical

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

UNC6240 bypasses WAFs to mass-exploit Oracle PeopleSoft CVE-2026-35273 and deploy web shells and SIDEEYE.

Exploited4 min readoracle peoplesoft

Google Threat IntelligenceSep 25, 2026high

ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft

ShinyHunters is mass-exploiting Oracle PeopleSoft CVE-2026-35273, bypassing WAF rules to plant web shells.

Exploited15 min readshinyhunters unc6240

Stories tagged #unc6240

ShinyHunters Bypasses WAF Protections to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Oracle PeopleSoft Servers Targeted Again as ShinyHunters Expands Extortion Operations

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft