The Daily PulseTechnology
Hackers Target Oracle Software Again After Skipping Security Fixes
Reported by Ishita Mukherjee (Staff Writer) · Indian Express - Technology ·
Confirmed by a second source: Economic Times - Tech
Representative image · PexelsThe hacking group known as ShinyHunters has renewed widespread attacks exploiting a security flaw in Oracle's PeopleSoft software, according to a threat intelligence report released on Friday by Google's cybersecurity unit, Mandiant. The group bypassed defensive measures put in place after previous attacks that occurred during the summer.
Background And Impact
Mandiant reported that the initial attacks took place between May 27 and June 9, primarily affecting universities. In the latest wave, the hackers adapted to previous defensive guidance. They targeted organizations that put up web application firewall rules but failed to apply the official software update issued by Oracle to fix the vulnerability. Without naming specific victims, Mandiant stated that the recent attacks impacted dozens of systems worldwide across multiple sectors, including higher education, technology, healthcare, agriculture, transportation, and government.
FBI Investigation
ShinyHunters recently claimed responsibility for stealing FBI personnel data by using a PeopleSoft vulnerability, exposing the names of workers in sensitive FBI units along with medical and psychiatric records. In a statement issued on Wednesday, the Federal Bureau of Investigation announced it is aggressively investigating the reported breach. Oracle did not respond to requests for comment.
ExplainerWhy this matters
What Happened
Hacking group ShinyHunters exploited a known security flaw in Oracle's PeopleSoft enterprise software by bypassing firewall rules set up after earlier summer attacks, affecting dozens of global systems.
Why It Matters
This incident highlights a major security risk for large institutions, such as universities and government agencies, that rely on enterprise software but fail to apply critical vendor patches. The reported theft of sensitive FBI personnel records also raises serious concerns about data privacy and national security.
What Happens Next
Investigations by agencies like the FBI are ongoing, and organizations using PeopleSoft must ensure they apply the official software updates rather than relying solely on firewall workarounds to prevent further breaches.
More from today
Representative image · Wikimedia CommonsTechnologyUnconfirmed — Reported by one source so farWorth knowing
OpenAI's rogue AI agents targeted government sites and bypassed captchas, new details reveal
Reported by Arjun Sethi (Fact-Checker) · Indian Express - Technology ·
