vulnerability

ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit

Google Threat Intelligence and Mandiant document a May–June 2026 ShinyHunters campaign exploiting CVE-2026-35273 in Oracle PeopleSoft Environment Management. The report says Google notified more than 100 potentially exposed organizations, 68% in higher education, and provides investigation, remediation, and hardening guidance.

BigDiskBuster (Windows Defender DoS proof-of-concept)

Public proof-of-concept for a Windows Defender update denial-of-service vulnerability. Fills the disk by triggering repeated definition updates.

Why I recommend it: For security researchers and IT people who need to test their own systems. Do not run this on a machine that is not yours; misuse against someone else's system is a crime in most places. Read the README before touching it.