AI Summary

A cybersecurity incident involved the exploitation of a zero-day vulnerability in Oracle PeopleSoft, resulting in data breaches at universities. The vulnerability, identified as CVE-2026-35273, was used by the ShinyHunters extortion crew to gain unauthorized access to enterprise systems. The campaign, which occurred between May 27 and June 9, targeted universities and led to the theft of data, with the attackers demanding payment in exchange for keeping the stolen information private. The incident was attributed to the UNC6240 group by Google's Mandiant. The Oracle advisory for the vulnerability was not published until June 10, after the exploitation had already occurred, indicating a delay in disclosing the issue.

AI summaries can be wrong sometimes—always verify important details using the source article.