search
PeopleSoft
Trends
- 1ShinyHunters widens PeopleSoft hacking campaign▼ShinyHunters expands PeopleSoft hacking spree days after defacing the FBI jobs site
The hacking group ShinyHunters is broadening its attacks targeting Oracle PeopleSoft systems, according to Fortune, just days after defacing the FBI's jobs website. The expansion suggests an ongoing and escalating campaign against the enterprise software platform, with the group showing no signs of slowing despite law enforcement attention following the FBI site defacement.
- 2ShinyHunters hackers expanded attacks on Oracle PeopleSoft, Google says▼ShinyHunters hackers expanded attacks on Oracle's PeopleSoft, Google says
Google researchers say the hacking group ShinyHunters has broadened its attacks targeting Oracle's PeopleSoft software. The group, previously known for large-scale data theft campaigns, is reportedly exploiting vulnerabilities to compromise enterprise systems. The finding raises concerns for organizations running PeopleSoft, with security teams urged to patch systems and review exposure to the campaign.
- 3Oracle PeopleSoft flaw mass-exploited by ShinyHunters●🤖 Oracle PeopleSoft CVE-2026-35273 (CVSS 9.8, unauthenticated RCE) is being mass-exploited again by ShinyHunters. Attack
Attackers are mass-exploiting a critical Oracle PeopleSoft vulnerability, CVE-2026-35273, rated CVSS 9.8 as an unauthenticated remote code execution flaw. The ShinyHunters group is reportedly using URL-encoding tricks to bypass WAF rules before deploying web shells. Google has warned of global targeting across multiple sectors, and renewed exploitation waves are drawing fresh attention from security teams.
- 4ShinyHunters bypasses firewalls in Oracle PeopleSoft attacks●ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks Source: BleepingComputer Read: https://www. bleepingcomp
The hacking group ShinyHunters is reported to be exploiting a web application firewall bypass technique to break into organizations running Oracle PeopleSoft, according to BleepingComputer. The trick allegedly lets the group slip malicious requests past defensive filters, raising concerns for enterprises relying on WAFs alone. Security teams are being urged to patch and monitor PeopleSoft deployments.