20 days ago
ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
What's happening
SignalsMonitor is following this as a conflict story. BleepingComputer is the outlet attached so far. The first report grouped here was at 26 Sept 2026, 19:03 UTC. The headline in use is “ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks”. This note is SignalsMonitor's own briefing, not the publisher's article.
What we know
The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers. [...
Story timeline
Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.
- First reported by BleepingComputer
ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
Reported by 1 outlet
- BleepingComputer
- BleepingComputerShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks