Enterprise resource planning systems were built to keep businesses moving. Payroll closes. Students receive aid. Suppliers get paid. Employees update records. Finance teams reconcile numbers. Executives rely on reporting. In most organizations, these workflows run quietly enough to be overlooked until a security event turns them into a board-level issue. The Oracle PeopleSoft zero-day did exactly that. Mandiant and Google Threat Intelligence Group (GTIG) confirmed an active compromise and extortion campaign attributed to UNC6240, also known as ShinyHunters, targeting Oracle PeopleSoft application infrastructure between May 27, 2026, and June 9, 2026. The activity aligned …

Continue Reading

Complete the short form to unlock the full blog. No password required.