-
A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle “Rey,” was detained as ShinyHunters was in the process of extorting a business unit recently divested by the global aerospace company Boeing, which manufactures the fleet of planes used by the employer of Rey’s father…
·
A Little Sunshine, Accenture, Benjamin Korper, Boeing, Cl0p, CVE-2026-35273, Data Breaches, FBI, Google Threat Intelligence Group, Jeppesen ForeFlight, Mandiant, Ne’er-Do-Well News, Neo Security, Oracle, PeopleSoft, Pepijn van der Stap, Ransomware, Reuters, Royal Jordanian Airlines, Saif Al-Din Khader, ShinyHunters, The Coming Storm, Umbreon¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The FBI removed a contractor over a ShinyHunters-linked breach. Reuters sources identified Accenture and an unpatched Oracle PeopleSoft system.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect’s arrest, remaining ShinyHunters members dramatically escalated their attacks, stealing highly sensitive data from the FBI and extorting the Russian ransomware group Cl0p.
·
404 Media, A Little Sunshine, Bloomberg, Cl0p, FBI, Google Threat Intelligence Group, KELA, Latest Warnings, Mandiant, Ne’er-Do-Well News, Neo Security, NL Times, Odido, Oracle, PeopleSoft, Pepijn van der Stap, Ransomware, Reuters, ScatteredLapsussHunters, ShinyHunters, SLSH, TeamPCP, Umbreon, Wired¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The ShinyHunters-linked threat cluster tracked as UNC6240 has renewed mass exploitation of Oracle PeopleSoft servers vulnerable to CVE-2026-35273. Expanding beyond its earlier focus on higher education into technology, healthcare, government, transport…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Oracle has released 943 security patches as part of its August 2026 Critical Security Patch Update (CSPU), addressing newly disclosed vulnerabilities across its enterprise software portfolio. This update affects Oracle products under both Premier Suppo…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Around 950 internet-facing Oracle E-Business Suite (EBS) instances have been identified as exposed following enhanced scanning efforts. At the same time, active exploitation attempts tied to CVE-2026-46817 have already been observed in the wild. The fi…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google says ShinyHunters exploited Oracle PeopleSoft zero-day to steal data from 100+ organisations, with universities making up most victims.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer code. That reality is on full display this month with some of the more widely-used software makers — including Apple, Google, Microsoft, Mozilla and Oracle — fixing near record volumes of security bugs, and/or quickening the tempo of their patch releases.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Korean Air confirms a major data leak affecting 30,000 staff members after the Cl0p gang targeted a catering partner. Learn what data was stolen and the airline’s response to secure its data.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
