Topic

Zero-day exploits

Vulnerabilities used in attacks before the vendor has issued a fix, leaving defenders to rely on configuration changes and detection rather than patching.

Current clusters

product1 publisher

ShinyHunters claims a PeopleSoft zero-day gave it code execution on FBI servers

The group told The Register it took more than 2TB of HR records and wants a retraction from the FBI, not a ransom. Everyone else running self-hosted PeopleSoft HCM has an extortion group's word and no Oracle advisory.

Publishers:techradar.com

Reality

Evidence25
Adoption20
Hype gap+40
Incentives85
Confidence60