Google confirmed that a zero-day vulnerability in Oracle's PeopleSoft, identified as CVE-2026-35273, has been exploited by the hacking group ShinyHunters to steal data, particularly targeting the education sector. While Oracle has issued mitigations, no patches are currently available, and the University of Nottingham has been identified as a confirmed victim of this breach.
The most actionable insight for you is that the PeopleSoft zero-day vulnerability CVE-2026-35273 has been actively exploited by ShinyHunters, primarily targeting the education sector. It is critical for organizations using PeopleSoft to implement Google's shared remediation and hardening recommendations immediately, as Oracle has not yet released patches. This proactive step could protect against similar exploitation attempts and mitigate the risk of data theft.