The University of Nottingham publicly confirmed a cyber incident where attackers claimed to have published its data, revealing a sophisticated 'gadget chain' attack targeting Oracle PeopleSoft servers across numerous institutions, according to Techzine Global. The breach highlights the immediate and public consequences for institutions relying on widely used enterprise software, with many of the compromised organizations being universities, according to TechCrunch.
Enterprise software like Oracle PeopleSoft is designed for stability and trust. However, its widespread use and complex architecture make it a prime target for cybercriminals exploiting a combination of old and zero-day vulnerabilities in what amounts to a significant Oracle PeopleSoft server breach in 2026.
Based on the successful exploitation of complex vulnerability chains, organizations relying on legacy enterprise systems are likely to face an increasing wave of multi-vector attacks, trading perceived stability for unacknowledged risk.
The 'Gadget Chain' Attack Unpacked
- The ShinyHunters gang is exploiting a combination of old and zero-day vulnerabilities, referred to as a 'gadget chain', to target Oracle PeopleSoft servers, according to SC Media.
- A zero-day vulnerability, identified as CVE-2026-35273, in Oracle PeopleSoft PeopleTools is being actively exploited in the wild, Help Net Security reported.
- Attackers are using a combination of older vulnerabilities and as-yet-unknown security flaws to gain access to PeopleSoft environments, according to Techzine Global.
The sophistication of these attacks lies in combining known and unknown flaws, making detection and defense particularly challenging for targeted organizations. The multi-pronged approach allows attackers to bypass traditional, single-vulnerability defenses.
