NewsHive
CONTACT USANALYST PORTAL →
securityBACKGROUND

ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Univ

BACKGROUND
1 SIGNALFIRST DETECTED 11 June 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
Other feeds and industry voices
22 Sept
ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach

The ShinyHunters extortion gang claims it breached FBI systems using a new Oracle PeopleSoft zero-day vulnerability, gaining access to internal services and stealing sensitive

REPORT · HOW · BleepingComputerOPEN STORY
10 Jun
The ShinyHunters hacking gang claims to have compromised the Oracle PeopleSoft servers of more than 100 organizations, including many universities.

The ShinyHunters hacking gang claims to have compromised the Oracle PeopleSoft servers of more than 100 organizations, including many universities.

OPINION · WHAT · TechCrunchOPEN STORY
26 Sept
ShinyHunters hackers expanded attacks on Oracle's PeopleSoft, Google says reut.rs/4hfjTRJ

ShinyHunters hackers expanded attacks on Oracle's PeopleSoft, Google says reut.rs/4hfjTRJ

OPINION · WHO · ReutersOPEN STORY
11 Jun
Oracle mitigates PeopleSoft zero-day exploited in data theft attacks

Oracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as CVE-2026-35273 that allows unauthenticated remote code execution, with the flaw actively

REPORT · WHAT · BleepingComputerOPEN STORY
26 Sept
ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat

REPORT · HOW · BleepingComputerOPEN STORY
29 Jun
NAIC says public data stolen in ShinyHunters' PeopleSoft breach

The National Association of Insurance Commissioners (NAIC) says the ShinyHunters extortion group stole only publicly available data, outdated logs, and configuration files after

REPORT · WHO · BleepingComputerOPEN STORY
29 Jun
Nissan discloses employee data breach linked to Oracle zero-day attacks

Nissan is warning that it suffered a data breach affecting current and former employees after threat actors exploited an Oracle PeopleSoft vulnerability in data theft attacks

REPORT · WHAT · BleepingComputerOPEN STORY
12 Jun
PeopleSoft 0-day affecting hundreds of organizations steals gigabytes of data

Vulnerability in the Oracle-owned PeopleSoft software is about as critical as they come.

REPORT · WHAT · Ars TechnicaOPEN STORY
Sources
The Hacker News

NewsHive monitors these sources continuously. All signal titles above link to the original reporting.

Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →