← Back to Feed

ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit

CVE-2026-35273

June 11, 2026 · Google Cloud Security · Severity: CRITICAL

Introduction Mandiant and Google Threat Intelligence Group (GTIG) have identified an active compromise and extortion campaign attributed to UNC6240 (ShinyHunters) targeting Oracle PeopleSoft application infrastructure. The activity was observed between May 27, 2026, and June 9, 2026 and is consistent with the exploitation of CVE-2026-35273, a critical remote code execution vulnerability (CVSS 9.8) in the Environment Management component.

Key Takeaways

  • ShinyHunters Targets Education Sector with Oracle PeopleSoft — CRITICAL severity involving CVE-2026-35273
  • Security advisory with actionable remediation guidance
  • Apply vendor patches and monitor for exploitation activity
☕ Buy a Coffee