ShinyHunters Renews Attacks on Oracle Vulnerabilities

The notorious hacking group ShinyHunters is active again. The cybercriminals have found a way to bypass Web Application Firewalls (WAF) when attacking Oracle PeopleSoft systems. This technique allows them to resume exploitation of servers that remain vulnerable to the CVE-2026-35273 security flaw. ## Attack Technique According to specialists, the hackers are using a specific URL-encoding method that allows them to breach security barriers originally designed to contain this vulnerability. Even though many organizations have already taken steps to mitigate this issue, the new method employed by ShinyHunters tricks firewalls into allowing malicious requests to pass through. The Oracle PeopleSoft platform is widely used by large corporations to manage business processes. Exploiting this vulnerability poses a threat not only to data privacy but also to the integrity of a company's internal infrastructure. ShinyHunters, known for large-scale data theft and subsequent extortion, is currently actively scanning for vulnerable servers to carry out unauthorized intrusions. ## What this means for users Experts urge all organizations using this Oracle product to immediately verify their security system configurations. Relying solely on a firewall is no longer sufficient in this instance. It is essential to update software and strengthen additional monitoring mechanisms to prevent attempts by groups like ShinyHunters. As PeopleSoft users are distributed globally, including those in Georgia, such cyber threats require maximum vigilance from IT security teams.