Critical PeopleSoft 0-day Powers Mass Ransomware Extortion Campaign

A critical PeopleSoft 0-day exploited by ShinyHunters for two weeks demonstrates how ransomware groups can compromise 100+ organizations before patches are available, with active extortion demands already being made. Higher education institutions—representing 68% of victims—are particularly vulnerable, with student and employee data at risk. This incident underscores the urgent need for immediate patching and the dangers of delayed vulnerability disclosure in widely-deployed enterprise software.