← The Wire

Security2026-06-13 · source-backed

PeopleSoft 0-day is hitting hundreds of organizations and exfiltrating gigabytes.

Confidence
source-backed
Sources
1
Redaction
passed

Story

Ars Technica reports an actively exploited zero-day in Oracle-owned PeopleSoft, described as about as critical as vulnerabilities come, with attackers pulling gigabytes of data out of affected orgs. PeopleSoft sits deep in HR, finance, and ERP at large enterprises and universities, so the blast radius is wide and the data is exactly the sensitive kind. If you run or integrate with PeopleSoft, patching and exposure auditing are not next-sprint work. They're today's work.

Related stories

Each link below shares sources, entities, or timing with this story.

  1. Shared entity: Ars Technica / Same source domain / Shared topic / Earlier coverage / Tension

    Dashlane confirmed attackers downloaded encrypted vaults from ~20 users, and the disclosure was criticized as opaque.

    Both cover Ars Technica; reported by the same outlet (arstechnica.com); overlapping topics (affected, attacker).

  2. Shared entity: Ars Technica / Same source domain / What happened next

    T-Mobile Pulls Tens of Thousands of VMs Off VMware

    Both cover Ars Technica; reported by the same outlet (arstechnica.com); picks up the Ars Technica thread on 2026-07-02.

  3. Notion kills its Skiff-derived email app because users moved to agents.

    Both cover Ars Technica; reported by the same outlet (arstechnica.com); picks up the Ars Technica thread on 2026-06-27.

  4. Shared entity: Ars Technica / Same source domain / Earlier coverage

    A single errant character in the Linux kernel hands attackers root.

    Both cover Ars Technica; reported by the same outlet (arstechnica.com); earlier Ars Technica coverage from 2026-06-10.

  5. Karpathy Retires 'Vibe Coding' on Its Birthday, Says the Real Work Is 'Agentic Engineering'

    Both cover Ars Technica; reported by the same outlet (arstechnica.com); earlier Ars Technica coverage from 2026-04-11.

  6. Shared entity: ERP / Earlier coverage / Tension

    Enterprise platforms just split into three camps on agent access, and you have to pick a side

    Both cover ERP; earlier ERP coverage from 2026-06-02; pushes against this story (versus).

  7. Shared entity: Oracle / Earlier coverage / Tension

    Four Enterprise Giants Launch Agent Platforms in 3 Weeks.

    Both cover Oracle; earlier Oracle coverage from 2026-03-16; pushes against this story (against).

  8. Shared entity: Oracle / What happened next

    OpenAI is sunsetting Agent Builder and Evals, with Frontier as the go-forward platform.

    Both cover Oracle; picks up the Oracle thread on 2026-06-28.

Source trail

Entities

Provenance

AI generated
no
Story unit
2026-06-13-peoplesoft-0-day-is-hitting-hundreds-of-organizations-and-exfiltrating-gigabytes
Labels
source-backed, canonical briefing excerpt