2026-06-13: ShinyHunters exploited Oracle PeopleSoft zero-day CVE-2026-35273 for two weeks

Show Notes - 2026-06-13

Stories Covered

• Today:
• Oracle PeopleSoft Zero-Day Exploited (CVE-2026-35273) [Critical Alerts]
• Conti Ransomware Member Pleads Guilty [Ransomware & Extortion]
• Global Schools Foundation Ransomware Negotiation Failure [Ransomware & Extortion]
• China-Linked Group Backdoored Linux Login Systems for 9 Years [Business & Infrastructure Threats]
• Supply-Chain Attack Early Warning Signs on Dark Web [Business & Infrastructure Threats]
• Insider Threat: Iowa School IT Worker Sentenced for Sabotage [Business & Infrastructure Threats]
• Maine Data Breach Portal Disabled After Fake Disclosures [Business & Infrastructure Threats]
• KPMG AI Report Demonstrates AI Hallucinations [General Security News]
• New macOS Tahoe 26 Forensic Artifact Discovered [General Security News]
• LabCorp Settles AMCA Breach for $35 Million [General Security News]
• DOJ: COVID-19 Relief Fraud Arrests [General Security News]
• phpBB Authentication Bypass (10 Years Old) [Vulnerability Disclosures]
• Microsoft Security Update Guide CVEs [Vulnerability Disclosures]

CVEs Referenced

CVE-2023-5678, CVE-2024-20399, CVE-2026-34180, CVE-2026-34181, CVE-2026-34182, CVE-2026-34183, CVE-2026-35273, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-44705, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-47162, CVE-2026-47167, CVE-2026-52859, CVE-2026-52860, CVE-2026-7383, CVE-2026-9076

Read the full brief