Attackers Exploit Oracle PeopleSoft Flaw to Deploy Web Shells
A critical zero-day vulnerability in Oracle PeopleSoft, tracked as CVE-2026-35273, is being actively exploited by attackers to deploy web shells and bypass web application firewalls.
Tag
#ShinyHunters
4 results in the archive.
McKesson Breach Exposes 284M Patient Records, Claimed by ShinyHunters
McKesson confirmed unauthorized access to third-party applications, with ShinyHunters claiming theft of 284 million patient records, raising healthcare data security concerns.
ShinyHunters Gang Claims Ernst & Young Data Breach via Supply-Chain Attack
The ShinyHunters extortion gang claimed responsibility for a data breach at Ernst & Young obtained through a supply-chain attack involving stolen system credentials.
ShinyHunters abuses OAuth in SaaS apps: Microsoft issues alert
Microsoft Threat Intelligence uncovered ShinyHunters abusing OAuth in SaaS applications through vishing, supply chain attacks, and guest access misconfigurations, exposing new SaaS security risks.