ShinyHunters Uses Oracle Zero-Day to Rampage Higher Education

ShinyHunters exploited a pre-auth zero-day (CVE-2026-35273) in Oracle PeopleSoft to breach numerous U.S. universities, stealing large volumes of student, faculty, and institutional data; Oracle issued emergency mitigations and a patch after active exploitation was reported, and the report details impacts, the actor's scale-focused playbook, and immediate remediation steps for affected institutions.