Nissan Americas Hit in Global Oracle PeopleSoft Data Breach
Overview
Nissan Americas has been impacted by a significant data breach linked to a zero-day vulnerability in Oracle’s PeopleSoft software, identified as CVE-2026-35273. This vulnerability has led to a series of attacks, with researchers connecting it to a group known as UNC6240, which is believed to be exploiting the weakness. The breach raises serious concerns about the security of sensitive employee information and operational data within Nissan Americas and potentially other organizations using the same software. As attackers continue to exploit this vulnerability, affected companies must act quickly to secure their systems and protect their data from further unauthorized access.
Key Takeaways
- Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
- Affected Systems: Oracle PeopleSoft software used by Nissan Americas and potentially other organizations utilizing the same system.
- Action Required: Organizations using Oracle PeopleSoft should immediately apply any available security patches from Oracle, conduct a thorough review of their systems, and enhance monitoring for unusual activity.
- Timeline: Newly disclosed
Original Article Summary
The Vulnerability Hackers found a serious zero-day vulnerability in Oracle’s software, which is being listed as CVE-2026-35273, sparking entire waves of attacks. Security researchers have also linked UNC6240 to infrastructure... The post Nissan Americas Hit in Global Oracle PeopleSoft Data Breach appeared first on Cyber Defense Magazine.
Impact
Oracle PeopleSoft software used by Nissan Americas and potentially other organizations utilizing the same system.
Exploitation Status
This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.
Timeline
Newly disclosed
Remediation
Organizations using Oracle PeopleSoft should immediately apply any available security patches from Oracle, conduct a thorough review of their systems, and enhance monitoring for unusual activity. Regular updates and security assessments should also be implemented to mitigate risks from similar vulnerabilities.
Additional Information
This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.
Related Topics: This incident relates to CVE, Zero-day, Exploit, and 3 more.