PeopleSoft 0-Day Hits Hundreds of Organizations, Exfiltrating Gigabytes of Data

Ars Technica·medium signal

Ars Technica reports an actively exploited zero-day in Oracle-owned PeopleSoft affecting hundreds of organizations, with attackers stealing gigabytes of data — described as about as critical as vulnerabilities come. PeopleSoft's deep footprint in HR, finance, and ERP at large enterprises and universities makes the blast radius significant. Builders running or integrating with PeopleSoft should treat patching and exposure auditing as urgent.