Borncity Chinese Hackers Exploit Microsoft 365 for 18 Months; Oracle PeopleSoft Vulnerability Targeted
Article Content
- •Chinese hackers maintained access to Microsoft 365 for 18 months, affecting multiple organizations.
- •CVE-2026-35273 in Oracle PeopleSoft was published on June 11, 2026, and is actively exploited.
- •Europol's takedown of a crypto mixer service underscores the ongoing fight against cybercrime.
Chinese hackers infiltrated Microsoft 365 environments, maintaining access for 18 months before detection. The attack exploited vulnerabilities to harvest sensitive data from various organizations. Simultaneously, a new vulnerability in Oracle PeopleSoft (CVE-2026-35273) was disclosed, with active exploitation reported shortly after its publication. This CVE was added to the CISA KEV list on June 12, 2026, indicating its critical nature. The vulnerability allows unauthorized access to sensitive information, impacting numerous organizations using the affected software. Additionally, Europol recently dismantled a cryptocurrency mixer service linked to cybercriminal activities, further illustrating the ongoing battle against cyber threats. The combination of these incidents highlights the evolving landscape of cyber threats and the need for robust security measures.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (12)
Following this threat?
Track CVE-2026-35273 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
SSRF to RCE Vulnerability in Oracle PeopleSoft Exploited by ShinyHunters On September 25, 2026, Mandiant reported ongoing mass exploitation of CVE-2026-35273 by the ShinyHunters group, a vulnerability in Oracle PeopleSoft. The vulnerability, first reported by TrendAI's Zero Day Initiative on June 10, 2026, allows attackers to leverage a Server-Side Request Forgery (SSRF) to achieve remote…
Apple Patches CoreGraphics Zero-Day Exploited in Targeted Attacks Apple has released emergency updates for iOS, iPadOS, and macOS to address a critical zero-day vulnerability, CVE-2026-86950, in its CoreGraphics framework. This out-of-bounds write flaw can allow arbitrary code execution when a device processes a maliciously crafted file. The vulnerability was reportedly exploited in…