One of the world’s most active ransomware groups exploited a critical vulnerability in Oracle’s PeopleSoft software suite and used it to target about 100 customers and extort at least one of them to pay up in exchange for not leaking stolen data, researchers said.

The group, tracked as ShinyHunters, had been exploiting the PeopleSoft vulnerability for more than two weeks before Oracle flagged it. CVE-2026-35273, as the vulnerability is tracked, carries a severity rating of 9.8 out of 10, making the former zero-day one of the year’s most critical vulnerabilities to be exploited.

Google’s Mandiant security team said it’s an SSRF (server-side request forgery), a vulnerability that allows attackers to send requests from a susceptible server to systems used by the targeted organization. Oracle said the SSRF is remotely exploitable, and the company has issued a stopgap mitigation but has yet to fully patch the flaw. Google has confirmed that victims are receiving extortion demands.

Read full article

Comments

Portugal reforçou a sua presença na edição de 2025 do Technology Fast 500 EMEA. com 18 empresas distinguidas. A melhor classificação portuguesa pertence à Bloq.it que ocupa novamente o segundo lugar no ranking da Deloitte.

The post Portuguesa Bloq.it em destaque entre as tecnológicas que mais crescem na Europa, Médio Oriente e África appeared first on Tek Notícias.

A conferência anual da Agência Espacial Portuguesa regressa a Lisboa este mês e segue o tema "A Arquitetura do Poder: Geopolítica na Segunda Era da Exploração Espacial”. A participação é gratuita, com inscrição obrigatória.

The post New Space Atlantic Summit regressa a Lisboa em junho para debater o futuro da exploração espacial appeared first on Tek Notícias.