Google says ShinyHunters renews mass exploitation of Oracle PeopleSoft flaw

  • Mandiant said ShinyHunters resumed exploiting an Oracle PeopleSoft vulnerability against organizations worldwide.
  • Dozens of systems across higher education, technology, healthcare, agriculture, transportation and government were affected.
  • ShinyHunters claimed FBI data access, while Reuters could not independently corroborate the claim.

Google’s cybersecurity unit Mandiant said hacking group ShinyHunters has resumed exploiting a vulnerability in Oracle’s PeopleSoft enterprise software after bypassing defenses introduced following attacks from May 27 through June 9. Those earlier attacks mainly affected universities. The latest campaign targeted organizations that had implemented web application firewall rules but had not installed Oracle’s patch, affecting dozens of systems across higher education, technology, healthcare, agriculture, transportation and government. The disclosure came days after ShinyHunters claimed it had stolen FBI personnel data, though Reuters could not corroborate that claim. The Federal Bureau of Investigation said Wednesday it was aggressively investigating the reported breach. Reuters previously reported that ShinyHunters exposed names of personnel in sensitive FBI units and obtained medical and psychiatric records. Oracle did not respond to requests for comment.

The information on this website is generated using AI and we cannot guarantee its accuracy. Please use it as reference information only.