Announcing MCP Toolbox Java SDK v1.0: Agentic data access for the enterprise
cloud.google.com·6d ago
Cloud & Infrastructure
Google Cloud Blog·17d ago·5 min read
ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft
TL;DR
ShinyHunters has resumed exploiting a vulnerability in Oracle PeopleSoft, targeting various sectors globally. Their modified approach bypasses web application firewalls, leading to widespread web shell deployments.
✦ Why It Matters
Immediately patch Oracle PeopleSoft to prevent exploitation and secure sensitive data.
Key Takeaways
- Patch Oracle PeopleSoft to close CVE-2026-35273 vulnerability.
- Monitor logs for suspicious requests to /PSEMHUB/ endpoints.
- Inspect for unauthorized JSP files in web application directories.
- Prepare for potential data extortion threats from attackers.
How It Works
ShinyHunters bypasses WAFs by URL-encoding the vulnerable endpoint path, allowing them to exploit systems that believed they were secure. This clever manipulation enables the attackers to deploy web shells for remote access and command execution.