Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

Oracle PeopleSoft Zero-Day Exploited in Ransomware Attacks, Warns CISA

Cyber Press
Cyber Press
Published June 17, 2026Original Report

Malware Families

Excerpt

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Oracle PeopleSoft vulnerability to its Known Exploited Vulnerabilities (KEV) catalog after confirming active exploitation in ransomware campaigns. The flaw, tracked as CVE-2026-35273 , affects Oracle PeopleSoft Enterprise PeopleTools and poses a severe risk to organizations relying on the widely deployed enterprise resource planning platform. CVE-2026-35273 is classified as…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREunknownCAPABILITYCl0pGh0st RATVICTIMunknown
Adversary
Infrastructure
Capability(2)
Victim

Attack Flow5 steps · MITRE ATT&CK mapped

Initial AccessTA0001T1190
1/5
Exploit Public-Facing Application
ActionExploit public-facing application
An unauthenticated remote attacker exploits a zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft Enterprise PeopleTools.

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-35273HighScore 80/100First seen

IOC Relationship Graph

Building graph…