PeopleSoft 0-day is hitting hundreds of organizations and exfiltrating gigabytes.

Ars Technica reports an actively exploited zero-day in Oracle-owned PeopleSoft, described as about as critical as vulnerabilities come, with attackers pulling gigabytes of data out of affected orgs. PeopleSoft sits deep in HR, finance, and ERP at large enterprises and universities, so the blast radius is wide and the data is exactly the sensitive kind. If you run or integrate with PeopleSoft, patching and exposure auditing are not next-sprint work. They're today's work.