The original headline is: "Oracle PeopleSoft Supply Chain Compromise: Nissan & 99 Targets"

Short summary

Oracle PeopleSoft systems in 100+ organizations including Nissan were compromised via Java deserialization vulnerabilities. Attackers accessed employee data, authentication credentials, and downstream systems like payroll and identity management. Detection requires monitoring for serialized Java payloads in HTTP traffic; remediation involves patching, network segmentation, and credential rotation.

• •100+ enterprises' PeopleSoft systems compromised through Java deserialization vulnerabilities in HTTP handlers
• •Attackers harvested credentials, session tokens, and lateral movement to payroll, identity, and banking systems
• •Mitigation: patch Oracle, segment networks, rotate LDAP/database credentials, monitor for serialized objects and audit log anomalies

Generated with AI, which can make mistakes.