A cybercrime group known as ShinyHunters has breached Oracle PeopleSoft enterprise software systems at more than 100 organizations, primarily universities, in a campaign exploiting a critical, unpatched vulnerability.