# PeopleSoft 0-day affecting hundreds of organizations steals gigabytes of data

Published: 2026-06-12 · Updated: 2026-06-12 · Category: Safety

Source page: https://www.sipply.dev/story/peoplesoft-0-day-affecting-hundreds-of-organizations-steals-a92eca9c · 中文: https://www.sipply.dev/zh/story/peoplesoft-0-day-affecting-hundreds-of-organizations-steals-a92eca9c

## Summary

A critical zero-day vulnerability in Oracle's PeopleSoft software, identified as CVE-2026-35273, has been exploited by the ransomware group ShinyHunters, impacting approximately 100 organizations. This vulnerability has been rated with a severity score of 9.8 out of 10, indicating its potential for significant harm. Reports indicate that the group has already extorted at least one victim for stolen data, which includes gigabytes of sensitive information.

## Key takeaways

- The CVE-2026-35273 vulnerability poses a severe risk to organizations using PeopleSoft, with hundreds potentially affected.
- Ransomware groups like ShinyHunters are actively exploiting such vulnerabilities, highlighting the need for robust cybersecurity measures.
- Organizations must prioritize patch management and vulnerability assessments to mitigate risks associated with zero-day exploits.

## Why it matters

This incident underscores the critical importance of cybersecurity in protecting sensitive organizational data from ransomware attacks, especially in widely used software systems.

- **Product managers:** Product managers should be aware of the vulnerabilities in the software they oversee and ensure that security measures are prioritized in product development and updates.
- **Developers:** Developers must focus on secure coding practices and stay informed about vulnerabilities in the libraries and frameworks they use to prevent exploitation.
- **Students and job seekers:** For students and job-seekers, understanding the implications of software vulnerabilities can enhance their skills in cybersecurity and make them more attractive to potential employers in the tech industry.

## Sources

- [PeopleSoft 0-day affecting hundreds of organizations steals gigabytes of data](https://arstechnica.com/security/2026/06/peoplesoft-0-day-affecting-hundreds-of-organizations-steals-gigabytes-of-data) (Ars Technica AI, 2026-06-12)

## 中文

### 影响数百家组织的PeopleSoft零日漏洞窃取数GB数据

Oracle的PeopleSoft软件中发现了一项关键的零日漏洞，标识为CVE-2026-35273，已被勒索软件团体ShinyHunters利用，影响约100家组织。该漏洞的严重性评分为9.8（满分10），表明其潜在的重大危害。报告显示，该团体已对至少一名受害者进行勒索，窃取了数GB的敏感信息。

**要点：**

- CVE-2026-35273漏洞对使用PeopleSoft的组织构成严重风险，可能影响数百家。
- 像ShinyHunters这样的勒索软件团体正在积极利用此类漏洞，凸显了加强网络安全措施的必要性。
- 组织必须优先考虑补丁管理和漏洞评估，以减轻与零日攻击相关的风险。

**为什么重要：** 这一事件强调了网络安全在保护组织敏感数据免受勒索攻击中的关键重要性，尤其是在广泛使用的软件系统中。

---
Sipply: Sip AI News Simply. https://www.sipply.dev