PeopleSoft 0-day affecting hundreds of organizations steals gigabytes of data

A critical zero-day vulnerability in Oracle's PeopleSoft enterprise resource planning software is being actively exploited, according to Ars Technica. The flaw allows attackers to exfiltrate gigabytes of sensitive data from affected organizations. Hundreds of entities—including government agencies and large corporations—are at risk. While the exact attack vector remains undisclosed, researchers have confirmed that the exploit does not require authentication, making it particularly dangerous. For developers and solopreneurs building AI workflows that integrate with legacy systems like PeopleSoft, this incident highlights the importance of securing data sources. Even if your AI pipeline processes sanitized outputs, a compromised backend can leak training data or proprietary information. Practical steps include patching immediately, restricting network access to PeopleSoft instances, and auditing any AI models that may have ingested potentially compromised data. This is not a theoretical risk—real-world data theft is already occurring.