ShinyHunters Exploit Oracle Zero-Day to Steal Data From US Universities

ShinyHunters is exploiting a zero-day vulnerability in Oracle’s ERP software to steal data from US higher-education institutions. The flaw disproportionately affects American universities running the vulnerable Oracle deployment, and the group has used it to exfiltrate large volumes of data. No patch details or CVE identifier were available in this report. Institutions running Oracle ERP software should review for signs of compromise and watch for vendor guidance on remediation.