Hackers turn business backup servers into crypto mines after sneaking malware

At least five organizations were targeted in just a few days.
cyberpress

Discourse Vulnerabilities Allow Hackers to Execute JavaScript and Read Server Files

Two newly disclosed vulnerabilities in Discourse let unauthenticated attackers execute JavaScript against anonymous visitors ...
The Hacker News

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

ShinyHunters-linked attackers exploit CVE-2026-35273 in Oracle PeopleSoft, bypassing WAF rules to deploy web shells on dozens of systems.
cloud

ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft

As an update to the June 2026 post, ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit, Mandiant and Google Threat Intelligence Group (GTIG) have identified renewed mass exploitation ...