Oracle PeopleSoft zero-day CVE-2026-35273 was exploited before Oracle’s June 10 advisory, exposing data and triggering extortion attacks.
The ShinyHunters extortion crew exploited an unpatched flaw in Oracle PeopleSoft to break into enterprise systems, steal data, and demand payment to keep it private. The campaign hit universities hardest.
Google’s Mandiant attributes it to the group … [4539 chars]
Source: The Hacker News | Published: 2026-06-11T20:29:00Z
Credit: The Hacker News
