ShinyHunters exploits new PeopleSoft zero-day, breaches FBI system

ShinyHunters claims a new PeopleSoft zero-day, distinct from CVE-2026-35273, was used to breach an FBI system and steal data on all employees. The FBI confirmed the breach, Oracle has not commented and no CVE has been assigned. Analysts urge customers to pull the Environment Management Hub and Integration Broker off the public internet.

• ShinyHunters claims a second PeopleSoft zero-day after CVE-2026-35273
• FBI confirmed the breach and theft of data on all its employees
• Oracle has not commented and no CVE has been assigned
• Analysts urge pulling Environment Management Hub off the internet