+1, in this case, the hackers exploited a CVE in PeopleSoft that had a published patch. The contractors just didn't apply the patch. https://www.reuters.com/technology/accenture-contractor-remo...