Blog

Google said ShinyHunters exploited a bug in Oracle’s PeopleSoft enterprise software in attacks from May 27 to June 9, 2026. Mandiant said that the hackers adapted to defensive guidance published after the May-June attack and targeted organisations that implemented web application firewall rules but did not apply an update that Oracle issued to patch the vulnerability. It said, without identifying the victims, that the latest attack affected dozens of systems globally in sectors as varied as higher education, technology, healthcare, agriculture, government, and transportation.