Výsledky hledání

SPOJENO PŘES CVE ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers. [...]

KEV ✓ · ransomware EPSS 0.09 CVSS 9.8 CVE-2026-35273 Oracle Google Microsoft školství zdravotnictví doprava veřejná správa US

tg: varování tg: zneužíváno tg: rozbor tp: malware tp: ransomware

26. 9. 2026 21:03 · BleepingComputer · ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks 25. 9. 2026 16:00 · Mandiant / Google TI · ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft 24. 6. 2026 · Zero Day Initiative · ZDI-26-387: Oracle PeopleSoft HttpListeningConnector Server-Side Request Forgery Vulnerability