Itpro FBI Breached via Unpatched Oracle Software Vulnerability
Article Content
- •FBI breach attributed to unpatched Oracle PeopleSoft vulnerability (CVE-2026-35273).
- •ShinyHunters exploited the vulnerability after a three-month delay in applying the patch.
- •Sensitive employee data, including PII, potentially exposed to malicious actors.
The FBI confirmed a breach by the ShinyHunters ransomware group, which exploited a critical vulnerability (CVE-2026-35273) in Oracle's PeopleSoft software. The vulnerability allowed unauthenticated remote code execution, enabling attackers to access sensitive employee data and operational systems. ShinyHunters conducted an automated scan to identify vulnerable systems, targeting the FBI's recruitment portal, FBIjobs.gov, which had not received a critical patch for three months. The breach potentially exposed personal identifiable information (PII) of thousands of FBI employees, including sensitive operational details. The FBI is currently investigating the breach and assessing the extent of the data compromised. Experts warn that the stolen data could have serious real-world implications, especially if sold to malicious actors.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (49)
Following this threat?
Track shinyhunters, FBI and CVE-2026-35273 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
SSRF to RCE Vulnerability in Oracle PeopleSoft Exploited by ShinyHunters On September 25, 2026, Mandiant reported ongoing mass exploitation of CVE-2026-35273 by the ShinyHunters group, a vulnerability in Oracle PeopleSoft. The vulnerability, first reported by TrendAI's Zero Day Initiative on June 10, 2026, allows attackers to leverage a Server-Side Request Forgery (SSRF) to achieve remote… 
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access…