Gulf News

"oracle" It warns of a security vulnerability that hackers exploited to infiltrate more than 100 companies

New York, June 14 / WAM / The software and cloud computing company “Oracle” warned its customers of the existence of a serious security vulnerability in the “PeopleSoft” program, which is used by major companies to manage payroll and human resources.

A day after a cybercriminal group claimed responsibility for exploiting this vulnerability as part of a large-scale hacking campaign.

The company published this security warning after the hacking group “Shiny Hunters” claimed to have hacked more than 100 organizations that use the “PeopleSoft” server application.

The TechCrunch website, which specializes in technology topics, indicated that the cybersecurity company Mandiant, a subsidiary of Google, which specializes in investigating electronic attacks, warned in a post on its blog that the new vulnerability in Oracle is the same one that the Shiny Hunters group exploited in the hacking operation it carried out.

Oracle, which has not issued an update to address this vulnerability yet, explained in the warning that this vulnerability can be exploited over the Internet without the need for any means of identity verification, such as a password.

Oracle recommended that its customers who use the PeopleSoft program apply the protection measures it provides to prevent exploitation of the security vulnerability.

A member of the “Shiny Hunters” group announced that the group had hacked into companies’ systems by exploiting a security vulnerability in PeopleSoft’s servers.

This vulnerability is considered a category known as a “zero-day vulnerability,” which means that this vulnerability was not known before and the company developing the application, which is Oracle in this case, did not have enough time to fix it before it was discovered and exploited.

Mandiant confirmed that it had notified more than 100 global institutions, most of them in the United States, that may be vulnerable to hacking, explaining that about two-thirds of these institutions work in the field of higher education, which is consistent with what the Shiny Hunters group previously claimed.

-Except-

Related Articles

Back to top button