ShinyHunters Breached the FBI by Bypassing the Fix by Lucie Cardiet

ShinyHunters exploited a known Oracle PeopleSoft vulnerability (CVE-2026-35273) to breach the FBI jobs portal and access additional cloud storage, claiming 2–3 TB of personnel data; Mandiant observed the same vulnerability being actively exploited across education, healthcare, technology, agriculture, transportation and government, and reported that a firewall-based mitigation could be bypassed by a single-character request modification, so organizations must apply Oracle's June 10 patch and follow full remediation guidance.