ShinyHunters Group Exploits Oracle PeopleSoft Zero-Day to Breach Universities

The ShinyHunters extortion group has leveraged an unpatched remote code execution vulnerability in Oracle PeopleSoft to compromise university systems. This zero-day flaw, identified as CVE-2026-35273 and rated 9.8, allowed data theft and ransom demands without requiring user login or interaction. The incident highlights critical security risks for organizations using the affected software.