Cyber attacks

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws

The Hacker News28 October 2026, 06:04 UTC

The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request forgery (SSRF) that reaches an internal management interface because PeopleSoft trusts its own loopback address

Read the full story at The Hacker News Open in the live monitor

Related discussion groups

No group discusses this yet. Start a discussion group and attach this story.

More on Cyber attacks

(LEAD) Presidential office holds emergency meeting over financial-sector hacking attacksYonhap English28 October 2026, 08:06 UTCSouth KoreaCyber attacksSEOUL, Oct. 28 (Yonhap) -- The presidential office convened an emergency meeting...
Tres empresas financieras de Corea del Sur reportan nuevos ciberataquesInfobae Americas28 October 2026, 07:30 UTCSouth KoreaCyber attacks
Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud BreachThe Hacker News28 October 2026, 07:13 UTCJapanCyber attacksJapan's GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, after refusing to pay an extortion demand....
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic EmergesThe Hacker News28 October 2026, 05:42 UTCUnited States of AmericaCyber attacksThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli decoder library to its Known Exploite...
Hackers target US FEC system, disrupting campaign finance disclosures days before midtermsRappler28 October 2026, 05:30 UTCUnited States of AmericaCyber attacksThe outage prevents organizations from filing the Federal Election Commission's 24-hour and 48-hour spending reports, which show how much political groups and others are spending on specific races
Presidential office to hold emergency meeting over financial-sector hacking attacksYonhap English28 October 2026, 05:19 UTCSouth KoreaCyber attacksSEOUL, Oct. 28 (Yonhap) -- The presidential office was set to hold an emergency ...