ShinyHunters cybercrime group exploits Oracle PeopleSoft zero-day
Story essentials
ShinyHunters
United Kingdom
June 9, 2026
This page is produced by collecting and structuring multiple public reports. Sections based only on reporting or testimony affect the displayed assessment, and the page is updated when new information is identified.
About this article
COMPAMIR Editorial Team
The COMPAMIR editorial team brings together public reporting and links to the original coverage. We update the page as new information emerges.
Read our editorial policyRead next
Prioritized by shared people, places, and events.
Critical PHP Zero-Day Vulnerabilities Discovered and Exploited
Two critical PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619) allow full server control. The flaws affect PHP 5.4 and later, with active exploitation already detected. Patches have been released in versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35.
Related book
Click Here to Kill Everybody: Security and Survival in a Hyper-connected World
Author: Bruce Schneier
This book provides a comprehensive look at the systemic risks of a hyper-connected world, explaining how vulnerabilities in enterprise software like Oracle PeopleSoft can be weaponized by cybercriminal groups to cause massive data breaches.
As an Amazon Associate, COMPAMIR earns from qualifying purchases.