ShinyHunters Uses Oracle Zero-Day to Rampage Higher Ed
A major bug in Oracle's ERP software disproportionately affected American universities, and hackers have capitalized by stealing gobs of data.
Stay updated on the latest in information security theft, from data breaches to identity theft, safeguard your digital assets with our news and tips.
Search across headline titles and summaries.
Background for this topic.
Theft in the context of information security is the unauthorized appropriation of data, intellectual property, or digital assets from individuals or organizations. This encompasses a range of illicit activities where sensitive information is stolen for various purposes, including financial gain, strategic advantage, or sabotage.In digital environments, theft often manifests through the intrusion of computer systems via hacking, phishing, or other cyberattack methods. Perpetrators may target personal identifiable information (PII), financial records, business plans, proprietary software, or any other form of confidential data.Information security measures are crucial in safeguarding against theft, involving strategies such as encryption, access controls, intrusion detection systems, and regular security audits to deter and detect unauthorized access to valuable information assets.
Weekly headline count for the current query.
A major bug in Oracle's ERP software disproportionately affected American universities, and hackers have capitalized by stealing gobs of data.
The ShinyHunters extortion crew exploited an unpatched flaw in Oracle PeopleSoft to break into enterprise systems, steal data, and demand payment to keep it private. The campaign hit universities hardest
Oracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as CVE-2026-35273 that allows unauthenticated remote code execution, with the flaw actively exploited in ShinyHunter data theft attacks. [...]
Oracle PeopleSoft servers are being targeted in ongoing data theft attacks by the ShinyHunters extortion gang, which claims to have stolen data from over 100 organizations. [...]