Oracle PeopleSoft Zero-Day Exploited by ShinyHunters in Breach of 100+ Organizations
Oracle warned in a June 2026 advisory that ShinyHunters is exploiting a PeopleSoft zero-day over the internet without authentication, with more than 100 organizations potentially compromised—after the gang claimed responsibility a day earlier. Mandiant says it notified 100+ mostly US orgs, about two-thirds in higher education, and reports theft of student records including DOBs and GPAs.