// Oracle HealthCRITICAL
ShinyHunters threat group has resumed mass exploitation of a critical vulnerability in Oracle PeopleSoft, bypassing mitigations deployed after initial attacks in May-June 2026. The threat actor has targeted dozens of systems across higher education, healthcare, technology, agriculture, transport, and public administration sectors in multiple countries. ShinyHunters claimed to have accessed FBI data through the vulnerability; the FBI confirmed it is actively investigating the breach.
- ShinyHunters resumes Oracle PeopleSoft exploitation — CNA | UA.N(opens in a new tab)
- Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Depl(opens in a new tab)
- ShinyHunters Hits Oracle PeopleSoft Again With WAF Bypass | Tech(opens in a new tab)
- ShinyHunters Bypass PeopleSoft WAF Rules for CVE-2026-35273 Expl(opens in a new tab)
- ShinyHunters Widens Attacks on Oracle PeopleSoft Systems, Google(opens in a new tab)
- Oracle PeopleSoft CVE-2026-35273: WAF Bypassed via URL Normaliza(opens in a new tab)
// Get alerts for Oracle Health