ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of the vulnerability on unpatched servers. The bypass technique evades existing protections, putting organizations running vulnerable PeopleSoft systems at renewed risk of data theft and extortion.