Oracle warns of security bug that hackers abused to breach 100+ companies

Oracle warned of a critical unauthenticated zero-day in PeopleSoft that the ShinyHunters cybercrime group is actively exploiting in a mass campaign against organizations (notably higher-education institutions), leading to compromises and the publication of stolen data; Oracle has provided mitigations but not yet released a patch, and Mandiant has notified over 100 potentially affected organizations.