Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
ShinyHunters has renewed a campaign exploiting a vulnerability in Oracle’s PeopleSoft enterprise software, targeting organizations that failed to install a security update after earlier attacks, according to Google’s cybersecurity unit Mandiant.
Summary
Mandiant said on Friday that the hacking group had launched a new wave of what it described as “mass exploitation” after adapting its techniques […]
This is a brief wire summary — the full story (linked below) has the complete details.
KazaSec's take
A newly disclosed vulnerability is only a real risk to your organization once it's confirmed present and exploitable in your own environment — not every CVE applies equally to every network. Knowing the difference is exactly what a proper vulnerability assessment is for.
Coverage details
We've archived 4 other articles touching the same topic (community insights) — see the full security news archive.
Related security advisories
Relevant from KazaSec
More coverage on this topic
We help organizations find and fix the gaps before they make headlines.