Security2026-06-13 · source-backed
PeopleSoft 0-day is hitting hundreds of organizations and exfiltrating gigabytes.
Story
Ars Technica reports an actively exploited zero-day in Oracle-owned PeopleSoft, described as about as critical as vulnerabilities come, with attackers pulling gigabytes of data out of affected orgs. PeopleSoft sits deep in HR, finance, and ERP at large enterprises and universities, so the blast radius is wide and the data is exactly the sensitive kind. If you run or integrate with PeopleSoft, patching and exposure auditing are not next-sprint work. They're today's work.
Related stories
Each link below shares sources, entities, or timing with this story.
Shared entity: Ars Technica / Same source domain / Shared topic / Earlier coverage / Tension
Dashlane confirmed attackers downloaded encrypted vaults from ~20 users, and the disclosure was criticized as opaque.
Both cover Ars Technica; reported by the same outlet (arstechnica.com); overlapping topics (affected, attacker).
Shared entity: Ars Technica / Same source domain / What happened next
T-Mobile Pulls Tens of Thousands of VMs Off VMware
Both cover Ars Technica; reported by the same outlet (arstechnica.com); picks up the Ars Technica thread on 2026-07-02.
Notion kills its Skiff-derived email app because users moved to agents.
Both cover Ars Technica; reported by the same outlet (arstechnica.com); picks up the Ars Technica thread on 2026-06-27.
Shared entity: Ars Technica / Same source domain / Earlier coverage
A single errant character in the Linux kernel hands attackers root.
Both cover Ars Technica; reported by the same outlet (arstechnica.com); earlier Ars Technica coverage from 2026-06-10.
Karpathy Retires 'Vibe Coding' on Its Birthday, Says the Real Work Is 'Agentic Engineering'
Both cover Ars Technica; reported by the same outlet (arstechnica.com); earlier Ars Technica coverage from 2026-04-11.
Shared entity: ERP / Earlier coverage / Tension
Enterprise platforms just split into three camps on agent access, and you have to pick a side
Both cover ERP; earlier ERP coverage from 2026-06-02; pushes against this story (versus).
Shared entity: Oracle / Earlier coverage / Tension
Four Enterprise Giants Launch Agent Platforms in 3 Weeks.
Both cover Oracle; earlier Oracle coverage from 2026-03-16; pushes against this story (against).
Shared entity: Oracle / What happened next
OpenAI is sunsetting Agent Builder and Evals, with Frontier as the go-forward platform.
Both cover Oracle; picks up the Oracle thread on 2026-06-28.
Source trail
Entities
Provenance
- Canonical issue
- Ramsay Research Agent — June 13, 2026
- AI generated
- no
- Story unit
- 2026-06-13-peoplesoft-0-day-is-hitting-hundreds-of-organizations-and-exfiltrating-gigabytes
- Labels
- source-backed, canonical briefing excerpt