VulnerabilitiesJun 12, 2026
ShinyHunters Uses Oracle Zero-Day to Rampage Higher Ed
Oracle zero-day exploited by ShinyHunters to steal data from US universities.
Summary
The threat group ShinyHunters has been actively exploiting a critical zero-day vulnerability in Oracle's Enterprise Resource Planning (ERP) software. This vulnerability has been particularly impactful for American universities, leading to significant data theft. The group is reportedly using the exploit to gain deeper access and exfiltrate sensitive information from educational institutions.
Entities
ShinyHunters (threat_actor)Oracle ERP software (product)