ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume ...
cloud

ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft

This follow-up report details how UNC6240 (ShinyHunters) is mass-exploiting Oracle PeopleSoft (CVE-2026-35273) by bypassing WAF rules via a single URL-encoded character, providing full analysis of the ...
Hackread

ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks

ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread ...
Reuters

Iran War

Saudi Grand Mufti tells troops to be ready to sacrifice their lives fighting Houthis Saudi Arabia's top religious authority called on soldiers in the kingdom to be ready to lay ‌down their lives to ...
Cyber Security News

Apache Tomcat Update Fixes WebSocket and HTTP/2 Flaws Affecting Server Security

Apache Software Foundation has released Tomcat 11.0.26 to address 12 security vulnerabilities spanning WebSocket, HTTP/2, AJP, authentication, and TLS certificate validation.