+34
Google's Mandiant says ShinyHunters renewed mass exploitation of an Oracle PeopleSoft flaw, targeting dozens of systems after summer attacks on universities.
Google's cybersecurity unit Mandiant said on Friday that hacking group ShinyHunters has renewed mass exploitation of a security flaw in Oracle's PeopleSoft software, after skirting defenses put up following attacks in the summer. The announcement, made in a threat intelligence report, comes days after ShinyHunters claimed responsibility for stealing FBI personnel data.
Renewed Attacks on PeopleSoft
Mandiant said ShinyHunters exploited a bug in Oracle's PeopleSoft enterprise software in attacks from May 27 through June 9 that mainly affected universities. The hackers then adapted to defensive guidance published after those attacks and targeted organizations that implemented web application firewall rules but did not apply an update that Oracle issued to patch the vulnerability.
The latest attack affected dozens of systems globally in sectors as varied as higher education, technology, healthcare, agriculture, transportation and government, Mandiant said, without identifying victims.
FBI Data Breach Claim
ShinyHunters has said it accessed FBI data using a vulnerability in PeopleSoft. Reuters has not been able to corroborate the claim. Oracle did not respond to requests for comment.
In a statement issued Wednesday, the Federal Bureau of Investigation said it was aggressively investigating the reported breach. ShinyHunters exposed the names of personnel working in sensitive FBI units and acquired medical and psychiatric records, Reuters previously reported.
Risks for Organizations Using PeopleSoft
The evolving nature of the attack is likely to ring alarm bells at organizations that rely on PeopleSoft for human resources and other critical functions, and heighten concerns about the vulnerability of even well-resourced institutions.
PeopleSoft is widely used by universities, government agencies, and large enterprises to manage payroll, HR, and student data, making it a high-value target for attackers seeking sensitive information.
Mandiant's report underscores the need for organizations to apply Oracle's patch promptly, as firewall rules alone may not be sufficient to block the renewed exploitation.
Shinyhunters Oracle Peoplesoft Mandiant Google FBI Data Breach Cybersecurity
Canada Latest News, Canada Headlines
Similar News: You can also read news stories similar to this one that we have collected from other news sources.
Why Oracle's force majeure notice is freaking out AI bullsOracle can't escape concerns.
Read more »
Oracle issues force majeure notice on New Mexico data center over power delaysOracle issued a force majeure notice to a Blue Owl unit developing a large New Mexico data center, citing potential power delays. Oracle shares fell about 4% as the company seeks to delay payments for the Project Jupiter campus.
Read more »
Analysis-Oracle, Blue Owl project delay sends ripples through AI financing, sources sayNEW YORK, Sept 24 (Reuters) - Oracle's move to protect itself against potential delays at a massive data center project developed by Blue Owl in New Mexico sent a chill through the trillion-dollar
Read more »
ShinyHunters Hackers Say They Stole Psychiatric And Medical Records Of FBI StaffHackers obtained granular details about bureau employees and their assignments.
Read more »