Google warns about new attacks targeting Oracle PeopleSoft software

Google has issued a warning regarding a new extortion campaign orchestrated by the threat actor group ShinyHunters. According to reports from SecurityWeek, the attackers have updated their exploit methods to specifically target the Oracle PeopleSoft vulnerability identified as CVE-2026-35273. This recent activity highlights an evolving threat landscape for organizations utilizing this enterprise software.

This development carries significant operational implications for affected companies. Because PeopleSoft is frequently used for critical administrative functions, a successful breach could force businesses to overhaul their internal processes for generating, distributing, or filing tax documentation and invoices. Maintaining robust security patches is essential to prevent these disruptions to core financial workflows.