Oracle PeopleSoft servers under attack, Oracle pushes out-of-band security alert

A zero-day RCE vulnerability (CVE-2026-35273) in Oracle PeopleSoft PeopleTools is being exploited in the wild, and Oracle has published an out-of-band alert; security firms report active exploitation and limited patch visibility. Concurrently, the ShinyHunters extortion group claims to have breached over 100 organizations via PeopleSoft, leaking tens of gigabytes of personal and academic data (affecting up to ~500k people), while researchers published related IPs, domains, and tooling used in the intrusions to help defenders detect compromise.