Acronis Cyberthreats Update, July 2026

**Executive summary:** Oracle released emergency mitigations for a critical PeopleSoft PeopleTools zero-day (CVE-2026-35273) after the ShinyHunters extortion group exploited the flaw—often combined with other issues—to exfiltrate data from about 300 PeopleSoft instances across 100+ organizations (notably higher education); attackers used staging infrastructure, custom MeshCentral agents and reconnaissance tooling, left ransom notes, and the report also includes June 2026 malware detection statistics and Acronis protection guidance.