CyberSecurity News

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign

SecurityWeek

· September 28, 2026

AI summary

Google is warning about a new campaign by the extortion group ShinyHunters, which targets a vulnerability in Oracle PeopleSoft. The group has modified its exploit to attack this vulnerability, identified as CVE-2026-35273. This indicates a fresh wave of attacks against the PeopleSoft vulnerability. ShinyHunters is using the modified exploit in these new attacks. The vulnerability is being targeted in an effort by the group to extort victims.

Vulnerabilities mentioned

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Read the full article at SecurityWeekwww.securityweek.com/google-warns-of-shinyhunters-fresh-oracle-peoplesoft-campaign/

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to SecurityWeek.