ShinyHunters exploits Oracle PeopleSoft zero-day CVE-2026-35273 for RCE
1. Executive summary ShinyHunters (MITRE G1057) exploited CVE-2026-35273, a critical Oracle PeopleSoft flaw (CVSS 9.8, CWE-306), as a zero-day from as
1. Executive summary ShinyHunters (MITRE G1057) exploited CVE-2026-35273, a critical Oracle PeopleSoft flaw (CVSS 9.8, CWE-306), as a zero-day from as
1. Executive summary ShinyHunters (MITRE G1057) exploited CVE-2026-35273 in Oracle PeopleSoft Enterprise PeopleTools as a zero-day from 27 May 2026, before Oracle issued
1. Executive summary LiteLLM, an open-source AI gateway, confirmed on 21 October 2026 that stolen developer tokens were used to publish a malicious release, version
1. Executive summary Symantec has attributed attacks on a law enforcement agency, a naval shipbuilder and a military aircraft engine manufacturer in two NATO member states
1. Executive summary The FBI has arrested a further suspected co-conspirator of the ShinyHunters group, the third detention in roughly two weeks, following the group&
1. Executive summary Jordanian authorities detained Saif Al-din Khader, the Amman teenager who uses the handle "Rey," on or around early October 2026,
1. Executive summary The FBI has removed an Accenture contractor after a review found that a security patch, explicitly issued to secure a third-party managed
1. Executive summary ShinyHunters (MITRE G1057, tracked by Google as UNC6240) has launched a second mass-exploitation campaign against Oracle PeopleSoft, modifying its exploit for CVE-
1. Executive summary UNC6240 (ShinyHunters, MITRE G1057) has resumed mass exploitation of CVE-2026-35273, a critical missing-authentication flaw in Oracle PeopleSoft Enterprise PeopleTools, after
1. Executive summary Talos published its Threat Source newsletter on 24 September 2026, and the lead item describes a social-engineering confidence trick aimed at security
1. Executive summary ShinyHunters (MITRE G1057) defaced the FBI's jobs portal, FBIjobs.gov, on Tuesday 22 September, replacing agency images with a Pokemon photograph,
1. Executive summary ShinyHunters (MITRE G1057) claims to have breached the FBI by exploiting a pre-authentication remote code execution zero-day in Oracle PeopleSoft on