ShinyHunters PeopleSoft attacks are back. A one-letter WAF bypass lets the group exploit CVE-2026-35273 and plant web shells on unpatched servers. Related Posts: Operation Master Turns GlobalProtect Breaches Into Brazilian Invoice Fraud Konni Launches Operation Conflict Compass Against Ukraine Kiteworks Mandates Global Precautionary Server Shutdown The post ShinyHunters Renews Oracle PeopleSoft Attacks With One-Character WAF Bypass appeared first on Daily CyberSecurity.

Oracle issued emergency guidance for CVE-2026-35273, a critical PeopleSoft flaw exploited in a ShinyHunters-linked campaign targeting universities. The post Oracle Warns PeopleSoft Customers After Critical Zero-Day Exploited appeared first on TechRepublic.