[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuxY7X8KGFbq5kWZ-yFlVShfDcSK6C1mww9WI5VPPAPo":3},{"article":4,"iocs":53,"watch_terms":54,"solutions":55,"lesson":115},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"1e0bf9c2-10af-4960-b421-9344375b6022","Canadian cybersecurity executive arrested in federal extortion case","canadian-cybersecurity-executive-arrested-in-federal-extortion-case-a2f18c","Details of the case align with the investigation into ShinyHunters’ attack on FBI IT systems. The post Canadian cybersecurity executive arrested in federal extortion case appeared first on CyberScoop.","Federal authorities arrested Edward Dubrovsky, a Canadian cybersecurity executive and former COO of CYPFER, on charges of conspiracy to extort money. The arrest is reportedly linked to the ShinyHunters group's attack on FBI IT systems, which exposed employee data. Dubrovsky's firm, CYPFER, specializes in helping organizations negotiate with ransomware operators, and he recently published a book on ransomware negotiations. This arrest follows other detentions related to the ShinyHunters breach, including suspects in the Netherlands and another individual identified by Reuters.","Cybersecurity executive arrested for extortion conspiracy linked to ShinyHunters FBI breach.","https:\u002F\u002Fcyberscoop.com\u002Fedward-dubrovsky-cypfer-arrested-fbi-extortion-charges\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2026\u002F09\u002FGettyImages-2161905754.jpg","2026-10-10T13:35:50+00:00","2026-10-10T14:00:08.248876+00:00",8,[17,20,23,26,28],{"name":18,"type":19},"ShinyHunters","threat_actor",{"name":21,"type":22},"FBI IT systems","product",{"name":24,"type":25},"CYPFER","vendor",{"name":27,"type":25},"Accenture",{"name":29,"type":19},"Edward Dubrovsky","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":30,"icon":32,"name":33,"slug":34},null,"Nation-state","nation-state",[36,41,43,48],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":42},{"id":30,"icon":32,"name":33,"slug":34},{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[24,27,21],{"controls":56,"vendors":114},[57,85],{"slug":58,"name":59,"problem":60,"products":61},"patch-management","Automated patch management","Known holes get closed in days, not months.",[62,70,78],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":58,"product_name":82,"url":83,"description":84},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":86,"name":87,"problem":88,"products":89},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[90,98,106],{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"bitsight","Bitsight","\u002Fvendor-logos\u002Fbitsight.png","bitsight-tprm","Bitsight Third-Party Risk Management","https:\u002F\u002Fwww.bitsight.com\u002Fproducts\u002Fthird-party-risk-management","Supplier assessments and continuous monitoring based on security ratings.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",[],{"slug":116,"title":117,"body":118,"framework_refs":119,"framework_notes":128},"cybersecurity-executive-arrested-for-alleged-extortion-tied-to-shinyhunters-breach","Cybersecurity Executive Arrested for Alleged Extortion Tied to ShinyHunters Breach","This case highlights a deeply troubling conflict of interest within the incident response and ransomware negotiation industry, where a trusted cybersecurity professional allegedly exploited their privileged position to extort victims rather than protect them. Organizations in crisis often grant negotiation firms extensive access to sensitive systems and data, creating a high-trust relationship that can be weaponized if the vendor is compromised or corrupt. The alleged ties to the ShinyHunters group also demonstrate how threat actors may embed operatives or co-opt insiders within legitimate security firms. This matters because it erodes trust in the very ecosystem organizations depend on during their most vulnerable moments, and it underscores that third-party security vendors must themselves be rigorously vetted.",[120,121,122,123,124,125,126,127],"NIST CSF RS.CO-3 (Response Communications)","NIST SP 800-161 (Supply Chain Risk Management)","CIS Control 15 (Service Provider Management)","CIS Control 6 (Access Control Management)","ISO 27001 A.15.1 (Information Security in Supplier Relationships)","GDPR Article 28 (Processor Obligations)","NIST AC-2 (Account Management)","NIST IR-7 (Incident Response Assistance)",{}]