ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
Teaser from the source
The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerLinked advisories
- CVE-2026-35273Oracle PeopleSoft: Schwachstelle ermöglicht Codeausführung
- CVE-2026-35273Oracle PeopleSoft Enterprise PeopleTools — Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
- CVE-2026-35273Oracle PeopleSoft Enterprise PeopleTools: fehlende Authentifizierung
More on ShinyHunters
Other news entries
- Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion SiteNewsKrebs on Security
- ⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and MoreNewsThe Hacker News
- Ransomware Response Expert Arrested in ShinyHunters FBI Hack ProbeNewsSecurityWeek
- Cyber exec arrested in case allegedly tied to ShinyHunters hackersNewsBleepingComputer
- FBI Arrests Executive at Ransomware Negotiation FirmNewsKrebs on Security
- FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal HackNewsThe Hacker News
- What We Missed: FBI Strikes Back at ShinyHuntersNewsDark Reading
- FBI arrests another suspected ShinyHunters hacker after agency breachNewsBleepingComputer
ID