SPIN Unprocessed October 28, 2026 ai_technology cybersecurity
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
View original on thehackernews.comOverview
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request forgery (SSRF) that reaches an internal management interface because PeopleSoft trusts its own loopback address
SpinGraph analysis pending — check back after processing.
Ask AI about this story
Opens with the SpinGraph .md URL and structured context — one click, prompt included.
More from The Hacker News
View all →- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
- Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
- Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
- FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering
- Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
- American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed
Markdown (.md) · JSON-LD schema (.json) · Machine-readable for AI & GEO