aiqbench analysis
Oracle's PeopleSoft software contains a critical zero-day vulnerability that allows remote exploitation without authentication, enabling a cybercrime group to breach over 100 organizations, primarily in higher education. Since no patch is available yet, affected entities must immediately apply vendor-recommended mitigations to prevent data theft and unauthorized access. This incident underscores the urgent operational risk posed by unpatched legacy systems in enterprise HR and payroll environments.
Oracle warns of security bug that hackers abused to breach 100+ companies
The tech giant warned of a security flaw that a cybercrime gang said it's exploiting as part of a mass-hacking campaign. Google said it notified more than 100 organizations that had potentially vulnerable servers.
Oracle warned its corporate customers that there is a critical-rated vulnerability in its PeopleSoft software, which is used by large companies to manage payroll and human resources, a day after a cybercrime group took credit for abusing the flaw as part of a mass-hacking campaign. The company published the security advisory on Thursday after the hacking group ShinyHunters claimed…
Excerpt shown under the publisher's RSS terms · 59 words · full text and figures are on the publisher's site
Related coverage
Cl0p Hackers Exploit Windchill Servers to Steal Companies’ Secret Product Designs
Cybersecurity News · Jul 24, 2026
Weekly Cyber Security Newsletter Bulletin – Entra ID RCE, Claude Code Ransomware, T-Mobile Cable, Azure Credential Theft +20 Stories
Cybersecurity News · Aug 23, 2026
Scammers target hundreds of thousands of crypto owners after Trezor confirms data breach of email provider
TechCrunch · Sep 11, 2026
Weekly Cyber Security Newsletter Bulletin – Certighost Exploit, Checkpoint 0-day, HTTP/2 Flaw, Notepad++ Plugin Abuse +20 Stories
Cybersecurity News · Jul 26, 2026