[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmskuyRmcLxuOgUPcySJxgPUQR_dP-QZoYMJXhechEtw":3},{"article":4,"iocs":56,"watch_terms":64,"solutions":65,"lesson":160},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":33,"category":34,"article_tags":38},"ce6478d9-6659-4b5a-a039-2f4c4ed6e242","FBI arrests another suspected ShinyHunters hacker after agency breach","fbi-arrests-another-suspected-shinyhunters-hacker-after-agency-breach-257855","The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday. [...]","The FBI has arrested another suspected member of the ShinyHunters extortion group, believed to be involved in the recent breach of FBI systems via a third-party vendor's platform. This arrest follows previous law enforcement actions against the group, including the detention of a Dutch national and a suspect in Jordan who is reportedly cooperating with authorities. ShinyHunters claimed to have stolen terabytes of sensitive data by exploiting an Oracle PeopleSoft zero-day vulnerability.","FBI arrests another suspected ShinyHunters hacker involved in agency breach.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Ffbi-arrests-another-suspected-shinyhunters-hacker-after-agency-breach\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2024\u002F01\u002F25\u002FHacker_prison.jpg","2026-10-09T17:02:29+00:00","2026-10-09T18:00:17.386765+00:00",9,[17,20,23,26,29,31],{"name":18,"type":19},"ShinyHunters","threat_actor",{"name":21,"type":22},"Oracle","vendor",{"name":24,"type":25},"PeopleSoft","product",{"name":27,"type":28},"AWS GovCloud","technology",{"name":30,"type":19},"Umbreon",{"name":32,"type":19},"Rey","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":33,"icon":35,"name":36,"slug":37},null,"Nation-state","nation-state",[39,44,46,51],{"category":40},{"id":41,"icon":35,"name":42,"slug":43},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":45},{"id":33,"icon":35,"name":36,"slug":37},{"category":47},{"id":48,"icon":35,"name":49,"slug":50},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":52},{"id":53,"icon":35,"name":54,"slug":55},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[57,61],{"type":58,"value":59,"context":60},"url","http:\u002F\u002FFBIjobs.gov","Compromised FBI job portal",{"type":62,"value":18,"context":63},"malware","Extortion group responsible for the breach",[21,24],{"controls":66,"vendors":154},[67,96,125],{"slug":68,"name":69,"problem":70,"products":71},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[72,80,88],{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":97,"name":98,"problem":99,"products":100},"patch-management","Automated patch management","Known holes get closed in days, not months.",[101,109,117],{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"slug":126,"name":127,"problem":128,"products":129},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[130,138,146],{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"securityscorecard","SecurityScorecard","\u002Fvendor-logos\u002Fsecurityscorecard.png","security-ratings","SecurityScorecard Ratings","https:\u002F\u002Fsecurityscorecard.com\u002Fsolutions\u002Fuse-cases\u002Fsecurity-ratings\u002F","Outside-in security ratings and monitoring of suppliers.",{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",{"vendor_slug":147,"vendor_name":148,"vendor_logo":149,"product_slug":150,"product_name":151,"url":152,"description":153},"bitsight","Bitsight","\u002Fvendor-logos\u002Fbitsight.png","bitsight-tprm","Bitsight Third-Party Risk Management","https:\u002F\u002Fwww.bitsight.com\u002Fproducts\u002Fthird-party-risk-management","Supplier assessments and continuous monitoring based on security ratings.",[155],{"slug":156,"name":21,"logo_path":157,"roles":158},"oracle","\u002Fvendor-logos\u002Foracle.png",[159],"affected",{"slug":161,"title":162,"body":163,"framework_refs":164,"framework_notes":176},"shinyhunters-exploits-third-party-vendor-zero-day-to-breach-fbi-systems","ShinyHunters Exploits Third-Party Vendor Zero-Day to Breach FBI Systems","The ShinyHunters group breached FBI systems not by attacking the agency directly, but by exploiting a zero-day vulnerability in Oracle PeopleSoft through a third-party vendor's platform — a classic supply chain attack vector. This incident highlights the critical risk that third-party vendors pose when they have privileged access to sensitive government infrastructure without adequate vetting or monitoring. Zero-day vulnerabilities are especially dangerous because no patch exists at the time of exploitation, making proactive security hygiene and vendor risk management essential compensating controls. The theft of terabytes of sensitive data underscores that even highly secured organizations can be compromised through their weakest external link. This case reinforces why third-party access must be treated with the same rigor as internal privileged access.",[165,166,167,168,169,170,171,172,173,174,175],"CIS Control 15 – Service Provider Management","CIS Control 7 – Continuous Vulnerability Management","NIST SP 800-161 – Supply Chain Risk Management","NIST SR-3 – Supply Chain Controls and Processes","NIST AC-2 – Account Management","NIST AC-6 – Least Privilege","NIST SI-2 – Flaw Remediation","NIST CA-7 – Continuous Monitoring","ISO 27001 A.15 – Supplier Relationships","GDPR Article 28 – Processor Obligations","NIST CSF ID.SC-4 – Suppliers and Third-Party Partners",{"NIST AC-6 – Least Privilege":177,"NIST SI-2 – Flaw Remediation":178,"NIST AC-2 – Account Management":179,"NIST CA-7 – Continuous Monitoring":180,"GDPR Article 28 – Processor Obligations":181,"ISO 27001 A.15 – Supplier Relationships":182,"CIS Control 15 – Service Provider Management":183,"NIST SP 800-161 – Supply Chain Risk Management":184,"NIST SR-3 – Supply Chain Controls and Processes":185,"CIS Control 7 – Continuous Vulnerability Management":186,"NIST CSF ID.SC-4 – Suppliers and Third-Party Partners":187},"Least privilege limits what a vendor platform can reach.","Requires timely remediation once the PeopleSoft flaw is fixed.","Account management covers vendor accounts and their access.","Continuous monitoring helps detect suspicious activity via vendor platforms.","Processor obligations require vendors to protect personal data.","Supplier relationship controls set security requirements for vendors.","Service provider management covers assessing vendors whose platforms connect to sensitive systems like the FBI's.","Supply chain risk management addresses the third-party route ShinyHunters used.","Supply chain controls require vendors to meet security expectations.","Continuous vulnerability management includes tracking flaws in vendor platforms like PeopleSoft.","Monitoring suppliers helps detect risks such as vendor zero-days."]