ShinyHunters Uses Oracle Zero-Day to Rampage Higher Ed

A DarkReading news roundup highlights a surge in active exploitation and high-risk vulnerabilities across enterprise and public-sector targets. Notable incidents include ShinyHunters leveraging an Oracle ERP zero‑day to steal large volumes of university data, rapid exploitation of a max‑severity Ivanti Sentry flaw within 24 hours of disclosure, and a critical Check Point VPN zero‑day under active attack. Supply‑chain campaigns (Miasma, IronWorm, Hades/Shai‑Hulud) continue to propagate via repositories and package ecosystems, while attackers exploit a WinRAR flaw (CVE‑2025‑8088) in espionage/CT