security
Source: BleepingComputer
📅 27 September 2026 at 02:30 AM UTC
ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
Verified Primary Feed Ingestion
🏷️ Identified Common Vulnerabilities & Exposures (CVE)
⚡ Executive Takeaways & Intelligence Summary
The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers. [...]