A critical zero-day vulnerability in Oracle's PeopleSoft software has enabled attackers to steal gigabytes of data from hundreds of organizations. The flaw requires immediate patching across affected deployments.
A zero-day vulnerability in PeopleSoft, Oracle's enterprise resource planning software, is actively being exploited to extract large quantities of data from multiple organizations.
The vulnerability ranks among the most severe security flaws, with attackers gaining the ability to access and exfiltrate gigabytes of sensitive information. PeopleSoft serves organizations across finance, human resources, and supply chain management—making compromised systems a significant risk for data breaches.
Hundreds of organizations running vulnerable PeopleSoft instances have been targeted. The scope of the attack indicates this is not a targeted campaign but rather widespread exploitation of the flaw.
Oracle has not yet released a patch for the vulnerability. Organizations using PeopleSoft are advised to implement compensating controls, isolate affected systems where possible, and monitor for unauthorized access. Security teams should prioritize detection of anomalous data access and exfiltration attempts.
The incident underscores persistent risks in enterprise software. Zero-day vulnerabilities—flaws unknown to vendors before public exploitation—are particularly dangerous because no patch exists at the time of attack. The delay between discovery and patch deployment creates a critical window of exposure.
Organizations should assume systems may already be compromised and conduct forensic analysis of access logs and data transfers. Credential rotation for accounts with PeopleSoft access is recommended as a precautionary measure.
Oracleowned PeopleSoft handles sensitive employee and financial data for large enterprises globally. A breach of this scale could expose personally identifiable information, salary data, benefits information, and other confidential business records.
This marks another significant vulnerability in widely-used enterprise software, following a pattern of high-impact flaws in critical infrastructure and business systems. Organizations continue to face elevated risk during the period between vulnerability disclosure and patch availability.
Chinese startup Z.AI has open sourced its ZCode coding assistant and disabled certain features following user complaints that the tool was uploading codebases to overseas servers without permission.
The Open Observatory of Network Interference (OONI) is expanding its crowdsourced effort to map global internet censorship. The project invites users to contribute measurements to what it describes as the largest open dataset on network interference.
A new technique allows attackers to exfiltrate neural network weights from machine learning models, potentially exposing proprietary AI systems. Security researchers demonstrated the vulnerability across multiple model architectures.
A malicious npm campaign demonstrates how threat actors are evading supply chain protections by embedding malware in package runtime behavior instead of installation scripts. The 'indexed-btree' package exemplifies this evolving attack technique.