ShinyHunters Exploits Oracle PeopleSoft Zero-Day, Over 100 Organizations Compromised

A critical zero-day (CVE-2026-35273) in Oracle PeopleSoft is being actively exploited by the ShinyHunters group to achieve unauthenticated remote code execution and rapid data exfiltration; more than 100 organizations—primarily in the education sector—have reportedly been breached (including ~500,000 student records at the University of Nottingham), with Mandiant and others confirming attacks, proof-of-concept code public, and Oracle issuing an emergency alert but not yet a patch.