1. ShinyHunters Exploit Oracle PeopleSoft Zero-Day to Breach Universities (CVE-2026-35273) A critical, unauthenticated remote code execution flaw (CVSS 9.8) in Oracle PeopleSoft PeopleTools was exploited in the wild as a zero-day between May 27 and June 9, roughly two weeks before Oracle’s out-of-band advisory. Mandiant attributed the campaign to the financially motivated group UNC6240 (ShinyHunters), […]
Incident Response: How to Survive Ransomware
Incident response (IR): iAn organization’s structured approach to detecting, managing, and recovering from cybersecurity threats and data breaches aims to limit attack damage, minimize business disruption, and prevent future incidents. The owner of a family-run building supply company in a Kentucky town of about nine thousand got to the store a little before seven. She […]
Cyber Security Weekly: Top 5 Cybersecurity News Stories for the Week of June 1–7, 2026
1. ShinyHunters Leaks Data on 42 Million Charter Communications Customers The ShinyHunters extortion group published a trove allegedly stolen from Charter Communications, the telecom giant behind the Spectrum brand, after the company let a May 27 ransom deadline pass. The attackers say they gained entry through a voice-phishing (vishing) call that compromised an employee’s Microsoft […]
A Virtual Security Chief (vCISO) You Can Actually Afford
What is a virtual vCISO is, and why it may be the smartest line item a small organization adds this year A few months ago, I sat across the table in the break room from the owner of a family-run manufacturing shop in central Kentucky. He had forty employees, a payroll system, a customer database, […]
MFA Prompt Bombing: What It Is, Why It Works, and How to Stop It
MFA prompt bombing is a growing threat, but multifactor authentication remains one of your best defenses. Here is what changed and what to do about it. In September 2022, a contractor working for Uber got a notification on his phone. Then another. Then another. Forty push notifications in thirty minutes, each one asking him to […]