Oracle warns of security bug that hackers abused to breach 100+ companies

Oracle has issued a warning about a significant security vulnerability in its PeopleSoft software, which has been exploited by the ShinyHunters hacking group to breach over 100 organizations, including universities. This flaw, identified as CVE-2026-35273, poses serious risks to data security and privacy. Google has notified affected organizations regarding their potentially vulnerable servers.

This development is critical for Oracle as it highlights the company's ongoing challenges with software security and the potential fallout from such breaches, which can damage its reputation and customer trust. The incident underscores the need for robust security measures and timely updates to prevent exploitation by cybercriminals.

The breach reflects a broader trend of increasing cyber threats targeting major software platforms, raising concerns about the effectiveness of current security protocols. As cybercrime tactics evolve, organizations must remain vigilant and proactive in addressing vulnerabilities, particularly in widely used systems like Oracle's PeopleSoft. This incident also raises questions about the adequacy of response measures from tech companies in safeguarding user data.