Back to Feed
VulnerabilitiesJun 12, 2026

ShinyHunters Uses Oracle Zero-Day to Rampage Higher Ed

Oracle zero-day exploited by ShinyHunters to steal data from US universities.

Vendor Watch

Run Oracle ERP software?

Get an email when a reviewed story names Oracle ERP software, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works

Summary

The threat group ShinyHunters has been actively exploiting a critical zero-day vulnerability in Oracle's Enterprise Resource Planning (ERP) software. This vulnerability has been particularly impactful for American universities, leading to significant data theft. The group is reportedly using the exploit to gain deeper access and exfiltrate sensitive information from educational institutions.

Entities

ShinyHunters (threat_actor)Oracle ERP software (product)