Cross-Sector entity
Every one of those 1 sits in a single category, vulnerability. Of the tracked stories, 1 of 1 also mention Google, the most common co-covered peer. ShinyHunters (UNC6240) appears in 1 tracked Cross-Sector story from June 12, 2026. The tracked stories average 2 original sources each.
1 verified story tracked
Last mentioned: Jun 12, 2026
Entity pulse
Coverage balance Negative coverage leads. Negative coverage exceeds positive coverage by 100 percentage points.
Figures are computed live from our source-verified story record — see our methodology for how impact and sentiment are derived.
Every one of those 1 sits in a single category, vulnerability. Of the tracked stories, 1 of 1 also mention Google, the most common co-covered peer. ShinyHunters (UNC6240) appears in 1 tracked Cross-Sector story from June 12, 2026. The tracked stories average 2 original sources each.
Computed from the 1 stories linked to this entity. Beat comparisons are omitted because no baseline was available for this window.
Coverage cohort
Other entities that clear the same relevance threshold in stories also covering ShinyHunters (UNC6240). Shared-story counts are live from our verified record — not editorial picks.
Google Confirms Exploitation
Google Threat Intelligence Group publicly confirms zero‑day exploitation by ShinyHunters and notifies over 100 affected organizations.
Oracle Releases Out‑of‑Band Advisory
Oracle publishes mitigations for CVE-2026-35273 and warns customers to apply them immediately, but no full patch is provided.
Zero‑Day Exploitation Begins
According to Google and Mandiant, ShinyHunters starts actively exploiting CVE-2026-35273 to compromise PeopleSoft instances.
Attack Campaign Window
ShinyHunters targets ~300 instances across 100+ organizations, focusing on education sector. Deploys MeshCentral agents and lateral movement scripts.
Google and Mandiant confirm active exploitation of CVE-2026-35273, a critical unauthenticated RCE flaw in Oracle PeopleSoft. The ShinyHunters group compromised roughly 300 instances, with the higher education sector bearing 68% of the impact. Oracle has only released mitigations, leaving organizations exposed to data theft and extortion.
Source: SecurityWeek · SecurityWeek
