OTX Threat: ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft

UNC6240, also known as ShinyHunters, has resumed mass exploitation of CVE-2026-35273 targeting Oracle PeopleSoft systems globally across multiple sectors including education, technology, healthcare, agriculture, transportation, and government. The threat actor bypassed web application firewall rules by URL-encoding a single character in the request path, accessing the vulnerable Environment Manage CVEs: CVE-2026-35273 Sectors: Education, Technology, Healthcare