[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxsYN0OMnajUxCs30uoIaOl-oyKG8Pw_9idcENQYKK4s":3},{"article":4,"iocs":49,"watch_terms":50,"solutions":51,"lesson":145},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"0787790d-654e-4b8f-93bd-db2136d60013","FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack","fbi-arrests-another-shinyhunters-suspect-reportedly-involved-in-its-jobs-portal--30dc1b","The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X. ShinyHunters is the extortion group that said in September it had breached the FBI's jobs portal and stolen sensitive data on almost all FBI agents and job applicants. The FBI has not named the suspect, and no charges have been made public. The","The FBI has arrested a Canadian citizen in Pennsylvania, suspected of involvement in the ShinyHunters data breach that compromised sensitive information on nearly all FBI agents and job applicants. This marks the third public arrest related to the incident, following detentions in the Netherlands and Jordan. The breach reportedly stemmed from a contractor's failure to apply a critical security patch to an external platform, possibly Oracle's PeopleSoft.","FBI arrests a Canadian citizen in Pennsylvania linked to the ShinyHunters data breach.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F10\u002Ffbi-arrests-another-shinyhunters.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEhTRCTw1H9kT8UEVJYmaRrhHvMQEYFuE2TZqB62Wnxz8y4RIYOMald4OYO45ujfgSp0ixhgWVKb3_nJzoKV6gNuu_cKaN2Evnr9u7FlnwsPTPm9TPpikkUR-83UL3VrknNBzITPeFC8f1PKpYMwvH_AbBAFWcbPl61vUXJK1m0xJ_C5QYDIAGi_Ya-A5Tc\u002Fs1600\u002Fkash.jpg","2026-10-09T17:45:26+00:00","2026-10-09T20:00:32.378574+00:00",8,[17,20,23,26],{"name":18,"type":19},"ShinyHunters","threat_actor",{"name":21,"type":22},"PeopleSoft","product",{"name":24,"type":25},"Oracle","vendor",{"name":27,"type":25},"Accenture","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":28,"icon":30,"name":31,"slug":32},null,"Threat Intelligence","threat-intelligence",[34,39,44],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":40},{"id":41,"icon":30,"name":42,"slug":43},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":45},{"id":46,"icon":30,"name":47,"slug":48},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",[],[24,27,21],{"controls":52,"vendors":139},[53,82,110],{"slug":54,"name":55,"problem":56,"products":57},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":83,"name":84,"problem":85,"products":86},"patch-management","Automated patch management","Known holes get closed in days, not months.",[87,95,103],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":83,"product_name":107,"url":108,"description":109},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":111,"name":112,"problem":113,"products":114},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[115,123,131],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"bitsight","Bitsight","\u002Fvendor-logos\u002Fbitsight.png","bitsight-tprm","Bitsight Third-Party Risk Management","https:\u002F\u002Fwww.bitsight.com\u002Fproducts\u002Fthird-party-risk-management","Supplier assessments and continuous monitoring based on security ratings.",[140],{"slug":141,"name":24,"logo_path":142,"roles":143},"oracle","\u002Fvendor-logos\u002Foracle.png",[144],"affected",{"slug":146,"title":147,"body":148,"framework_refs":149,"framework_notes":161},"unpatched-contractor-system-leads-to-mass-fbi-personnel-data-breach","Unpatched Contractor System Leads to Mass FBI Personnel Data Breach","The ShinyHunters breach of the FBI's jobs portal illustrates the devastating consequences of failing to apply critical security patches to externally facing systems. A third-party contractor's negligence in patching what is believed to be Oracle's PeopleSoft platform created an exploitable entry point into systems containing highly sensitive data on nearly all FBI agents and job applicants. This incident underscores that an organization's security posture is only as strong as its weakest vendor link. When contractors handle sensitive government data, their patch compliance and security hygiene must be held to the same rigorous standards as internal teams. The ongoing arrests demonstrate the serious legal and reputational fallout that follows such breaches, but the damage to affected individuals cannot be undone.",[150,151,152,153,154,155,156,157,158,159,160],"CIS Control 7: Continuous Vulnerability Management","CIS Control 15: Service Provider Management","NIST SP 800-161: Supply Chain Risk Management","NIST SI-2: Flaw Remediation","NIST SA-9: External Information System Services","NIST RA-5: Vulnerability Scanning","NIST SP 800-53 CA-7: Continuous Monitoring","ISO 27001 A.15.1: Information Security in Supplier Relationships","GDPR Article 32: Security of Processing","GDPR Article 28: Processor Obligations","ITIL Change Management: Emergency Change Procedures",{}]