ShinyHunters hackers expanded attacks on Oracle's PeopleSoft, Google says

Google's cybersecurity unit, Mandiant, has reported that the hacking group ShinyHunters has renewed its mass exploitation of a security flaw in Oracle's PeopleSoft software. According to Mandiant, ShinyHunters adapted to defensive guidance published after previous attacks in May and June, and targeted organizations that had implemented web application firewall rules but not applied an update to patch the vulnerability.

The latest attack affected dozens of systems globally across various sectors, including higher education, technology, healthcare, agriculture, transportation, and government. The Economic Times Tech and The Indian Express both note that the evolving nature of the attack is likely to raise concerns about the vulnerability of even well-resourced institutions that rely on PeopleSoft for critical functions.

ShinyHunters has claimed responsibility for several major data breaches, including the theft of FBI personnel data, which it accessed using a vulnerability in PeopleSoft. Mandiant said that the attacks, which occurred from May 27 through June 9, mainly affected universities.

Brief written by urgent.news from Economic Times Tech, The Indian Express — 2 reports on this story. Machine-written — may contain errors; check the original before relying on it.