Share story
Security

Researchers identify three-flaw chain behind PeopleSoft server takeovers

Researchers identify three-flaw chain behind PeopleSoft server takeovers Image: Primary
The Oracle PeopleSoft vulnerability exploited by ShinyHunters combines three flaws, researchers at the Zero Day Initiative said this week. Oracle patched them under a single identifier, CVE-2026-35273, in June; ZDI is working with Oracle to obtain separate identifiers. The chain lets an unauthenticated attacker reach an internal management interface through requests that appear to originate from the server itself, then execute code. One route uses a malicious XML file rather than a web shell, leaving less for standard detection to catch. Mandiant says blocking administrative paths with web application firewall rules is no substitute for patching.
Sources
The Hacker News
In this story
Oracle
Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Products Infrastructure
Products Infrastructure

Jio rises 21% on market debut after $3.2 billion IPO

Jio Platforms rose 21% in its Wednesday stock market debut after raising $3.2 billion in India's largest IPO, TechCrunch reported. The Indian telecom and digital services company attracted more than $77 billion in bids; the offeri...

TechCrunch
Security
Security

Coinbase says Amplitude incident exposed some customer contact data

Coinbase said a security incident at analytics provider Amplitude affected a small subset of its customers' contact data. The exchange said it found no evidence of unauthorized access to Coinbase systems and that customer funds we...

Digit
Capital
Capital

NeuroXess raises RMB 700 million for implantable brain interfaces

Chinese brain-computer interface startup NeuroXess has raised RMB 700 million in Series B funding, TechNode reported. SDIC Juli, Shenzhen Capital Group and Qinzhi Capital co-led the round. The proceeds will support multicenter cli...

TechNode
AI Science
AI Science

Preprint reports coding gains from verified refactoring training

Researchers report that targeted refactoring training improved a 92B-parameter coding model serving more than 100,000 developers. Their preprint describes RefactorForge, a pipeline that uses software engineering tools and verifica...

cs.LG updates on arXiv.org