How are companies handling threat advisory posted for FBI Breach through Oracle PeopleSoft Zero-Day
Hey. We received information concerning a potential security vulnerability threat the “ShinyHunters” extortion group claimed it exploited a previously unknown Oracle PeopleSoft vulnerability to compromise FBI systems and steal employee and applicant data. There is a possibility that the CVE-2026-35273 was the initial-access vector. We have applied all of the Oracle Critical Patch updates, including September, as requested. However, we cannot find any other information regarding this topic. Our Executive Leadership team has made the decision to make our external careers site offline until more information can be provided to confirm that no vulnerability exists.