TGViewer
BleepingComputer BleepingComputer @bleepingcomputer · 11.6K subscribers
Post #25662 1.5K
 ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers. [...]

https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/
BleepingComputer ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers.
  • 🤣 2
  • 👍 1
Open in Telegram All posts from @bleepingcomputer
More from @bleepingcomputer
  1. Oct 15, 2026Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers Threat actors are exploit…
  2. Oct 15, 2026Android gets AI defenses against messaging scams, fake calls Google announced new AI-power…
  3. Oct 15, 2026Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth A proxyjacking cam…
  4. Oct 15, 2026Fake Arch Linux packages push malware with root privileges A threat actor uploaded malicio…
  5. Oct 15, 2026Is AI pentesting as good as a human pentester? AI pentesting can uncover vulnerabilities m…
  6. Oct 15, 2026Microsoft: Windows Server 2022 reached end of mainstream support Microsoft announced that…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →