ShinyHunters Renew Oracle PeopleSoft Software Attacks
Oracle Corp's stock slipped on Monday after Alphabet Inc's cybersecurity unit, Mandiant, reported that notorious hacking group ShinyHunters has renewed its attack on Oracle's PeopleSoft software.
The group successfully exploited defenses organizations had put in place after an earlier wave of attacks this summer, which mainly hit universities from May 27 through June 9.
Mandiant said the hackers adjusted to guidance published after the first wave and went after organizations that added web application firewall rules but skipped the update Oracle released to fix the vulnerability.
The new campaign has reached dozens of systems worldwide across higher education, technology, healthcare, agriculture, transportation, and government.