ShinyHunters resumes large-scale exploitation of Oracle PeopleSoft flaw

Google’s cybersecurity division announced that the hacker collective ShinyHunters has launched a fresh wave of mass exploitation against Oracle’s PeopleSoft enterprise software. The group modified its approach to sidestep newly published defensive guidance, targeting entities that had implemented firewall rules but had not applied Oracle’s recent security update. The latest intrusion has impacted dozens of systems globally, spanning sectors such as higher education, tech, health care, agriculture, transport and government agencies.

Earlier in the year the same vulnerability affected universities between late May and early June. ShinyHunters has previously asserted that it stole data from FBI personnel, prompting the FBI to state it is aggressively investigating the breach. Oracle has not responded to requests for comment.