NewsThe Hacker News11.06.2026

ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities

The ShinyHunters extortion crew exploited an unpatched flaw in Oracle PeopleSoft to break into enterprise systems, steal data, and demand payment to keep it private. The campaign hit universities hardest. Google's Mandiant attributes it to the group it tracks as UNC6240, and dates the activity between May 27 and June 9. Oracle did not publish its advisory until June 10, so the bug was a

Affected vendors and products

Oracle Peoplesoft
Oracle Oracle PeopleSoft Enterprise PT PeopleTools
Oracle Corporation Peoplesoft Enterprise Peopletools

Other news entries

Oracle celebrates end of Cybersecurity Awareness Month with quadruple troubleNewsThe Register — Security28.10.2026
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained FlawsNewsThe Hacker News28.10.2026
In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS RansomwareNewsSecurityWeek23.10.2026
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion SiteNewsKrebs on Security19.10.2026
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and MoreNewsThe Hacker News12.10.2026
Ransomware Response Expert Arrested in ShinyHunters FBI Hack ProbeNewsSecurityWeek12.10.2026
Cyber exec arrested in case allegedly tied to ShinyHunters hackersNewsBleepingComputer10.10.2026
FBI Arrests Executive at Ransomware Negotiation FirmNewsKrebs on Security10.10.2026

Source: https://thehackernews.com/2026/06/shinyhunters-exploits-oracle-peoplesoft.html

Affected vendors and products

More on ShinyHunters

Other news entries