| Mobile Web

Oracle warns of PeopleSoft zero-day flaw; hacking group claims over 100 organisations breached

Oracle has warned customers about a serious security vulnerability in its PeopleSoft human resources and payroll software, TechCrunch reported on June 11. The warning followed claims by cybercrime group ShinyHunters that it breached more than 100 organisations using PeopleSoft servers. Google-owned threat intelligence firm Mandiant said the flaw matches a bug ShinyHunters is exploiting. Oracle has not released a patch and urged customers to apply mitigations.