Security News ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks BleepingComputer Daniel Bender 26 Sep 2026 Share The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers.