The cybercrime group ShinyHunters has reportedly exploited a zero-day vulnerability in Oracle PeopleSoft to breach over 100 organizations globally. This enterprise software is widely used for managing human resources, payroll, and business operations across various sectors. The vulnerability, tracked as CVE-2026-35273, has allowed the group to compromise approximately 300 vulnerable instances to exfiltrate sensitive data.
Source