ShinyHunters exploiting workarounds for Oracle PeopleSoft bug, Mandiant warns
ID: 72e89302-0379-5d2b-b561-cadb115636fa
STIX ID: report--72e89302-0379-5d2b-b561-cadb115636fa
Feed Name: The Record from Recorded Future News
Threat Score
Mandiant reports that the ShinyHunters group is actively exploiting Oracle PeopleSoft vulnerability CVE-2026-35273 — including retooling attacks to bypass published workarounds — deploying web shells across dozens of global organizations (education, healthcare, government, etc.), and exfiltrating data for extortion; the group also claims responsibility for a breach of an FBI jobs site that may have exposed personnel records.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.