ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
The ShinyHunters extortion gang uses a URL encryption trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 vulnerability, allowing threat actors to re-exploit the vulnerability on vulnerable servers. Mandiant and Google’s Threat Intelligence Group (GTIG) say this new technique allowed the threat actor to once again target PeopleSoft servers that had … Read more