MEDIUMVulnerability
Global

ShinyHunters exploiting workarounds for Oracle PeopleSoft bug, Mandiant warns

·Source: The Record

Updated:

Executive Summary

A vulnerability in a popular line of products from Oracle is being used in a new campaign by the prolific ShinyHunters hacking group, which recently claimed credit for an attack on the FBI’s jobs site.

Analysis

A vulnerability in a popular line of products from Oracle is being used in a new campaign by the prolific ShinyHunters hacking group, which recently claimed credit for an attack on the FBI’s jobs site.
Source Attribution

Originally published by The Record on Sep 28, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Lloyds survey reveals 71% of UK FIs believe tokenisation will reshape financial services

Lloyds' 10th annual Financial Institutions Sentiment Survey, conducted between April and May 2026, showed that 71% of the 100 senior leaders surveyed across UK banks, insurers, financial sponsors and asset and wealth managers, expect tokenisation to transform how money and assets move through the financial system.

Finextra
CRITICALVulnerability

NVD CRITICAL: CVE-2026-94541 — The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerabl...

The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.82 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to exfiltrate password-reset URLs for arbitrary users, including administrators, mirrored into the p

CVE-2026-94541
NIST NVD
LOWVulnerability

Microsoft’s X account hacked in crypto pump-and-dump scheme

On Thursday, unknown attackers hijacked the official Microsoft account on X, which has over 13 million followers, in what appeared to be a pump-and-dump scheme promoting a crypto token. [...]

BleepingComputer