> TritonInfoSec News
Home / Jun 12, 2026 / Story
0
#1 The Hacker News general June 11, 2026 at 20:29 UTC

ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities

By [email protected] (The Hacker News)

AI Summary

ShinyHunters (tracked by Mandiant as UNC6240) exploited CVE-2026-35273, a critical unauthenticated RCE zero-day in Oracle PeopleSoft, between May 27 and June 9 — a full two weeks before Oracle published its advisory on June 10. Universities were the primary targets, with the University of Nottingham confirming a breach affecting over 450,000 student and alumni records. Security teams running PeopleSoft should apply Oracle's emergency patch immediately given active exploitation and the group's history of large-scale extortion campaigns.

Read full article → https://thehackernews.com/2026/06/shinyhunters-exp…

Relevance score: 92.0/100

# More from June 12

  1. 2
    CISA tells govt agencies to patch critical exploited flaws in 3 days BleepingComputer
  2. 3
    Max severity Ivanti Sentry vulnerability now exploited in attacks BleepingComputer
  3. 4
    Microsoft Patches Exploited Exchange Server Vulnerability SecurityWeek
  4. 5
    Russian national charged in connection with Void Blizzard espionage campaign CyberScoop
  5. 6
    GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks The Hacker News
  6. 7
    New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files The Hacker News
  7. 8
    ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances The Hacker News
  8. 9
    China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance The Hacker News
  9. 10
    Coupang hit with record $409 million data breach fine in Korea BleepingComputer