ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
From BleepingComputer to All on Sat Sep 26 15:12:05 2026
The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers. [...]