[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhIrVRc3b7Bw9atF5RjmLEULKiUXWl2pwdacAP-lo994":3},{"article":4,"iocs":53,"watch_terms":58,"solutions":59,"lesson":161},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"4eed50ef-dc9f-451f-9ff5-75d452d4322f","FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach","fbi-removes-accenture-contractor-after-patch-failure-led-to-shinyhunters-breach-e8fc3b","The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau employees. That's according to a report from Reuters, citing two sources familiar with the matter. \"To date, our review has determined that the incident occurred as the result of a security failure ​","The FBI has removed an Accenture contractor following a security failure that led to a data breach by the ShinyHunters group. The breach, which compromised the FBI's job portal and exposed personal details of thousands of employees, occurred because a contractor failed to apply a critical security patch to an Oracle PeopleSoft platform. ShinyHunters exploited a vulnerability related to CVE-2026-35273 to bypass security measures.","FBI removes Accenture contractor after patch failure led to ShinyHunters breach.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F10\u002Ffbi-removes-accenture-contractor-after.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEiVB4YaCEMdO6UU6llRwDBMNe82j6s6myWlT8Y92f808ntjdWsPEFgXBpFhGxoAZdkFq5DVA4_XaQpbwvJFjpEUxrRjjRVITahCSGSxmi3qkad2fk-kZ1oXnoxKaFHNs2aRQl7LQ6r2Ljt57IZNaFvwejEQ20us7fMVpNYptJxoVCyol8BlVaXyLkkaeHQI\u002Fs1600\u002Ffbi-breach.jpg","2026-10-06T06:56:57+00:00","2026-10-06T08:00:18.813745+00:00",8,[17,20,23,26,28],{"name":18,"type":19},"ShinyHunters","threat_actor",{"name":21,"type":22},"Accenture","vendor",{"name":24,"type":25},"Oracle PeopleSoft","product",{"name":27,"type":25},"Environment Management Hub",{"name":29,"type":22},"FBI","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":30,"icon":32,"name":33,"slug":34},null,"Breaches","breaches",[36,38,43,48],{"category":37},{"id":30,"icon":32,"name":33,"slug":34},{"category":39},{"id":40,"icon":32,"name":41,"slug":42},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[54],{"type":55,"value":56,"context":57},"cve","CVE-2026-35273","Vulnerability exploited by ShinyHunters",[21,29,24],{"controls":60,"vendors":148},[61,90,119],{"slug":62,"name":63,"problem":64,"products":65},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[66,74,82],{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":91,"name":92,"problem":93,"products":94},"patch-management","Automated patch management","Known holes get closed in days, not months.",[95,103,111],{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":120,"name":121,"problem":122,"products":123},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[124,132,140],{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"securityscorecard","SecurityScorecard","\u002Fvendor-logos\u002Fsecurityscorecard.png","security-ratings","SecurityScorecard Ratings","https:\u002F\u002Fsecurityscorecard.com\u002Fsolutions\u002Fuse-cases\u002Fsecurity-ratings\u002F","Outside-in security ratings and monitoring of suppliers.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":136,"product_name":137,"url":138,"description":139},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",{"vendor_slug":141,"vendor_name":142,"vendor_logo":143,"product_slug":144,"product_name":145,"url":146,"description":147},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",[149,155],{"slug":150,"name":151,"logo_path":152,"roles":153},"google","Google","\u002Fvendor-logos\u002Fgoogle.png",[154],"reported_by",{"slug":156,"name":157,"logo_path":158,"roles":159},"oracle","Oracle","\u002Fvendor-logos\u002Foracle.png",[160],"affected",{"slug":162,"title":163,"body":164,"framework_refs":165,"framework_notes":176},"unpatched-oracle-peoplesoft-flaw-lets-shinyhunters-breach-fbi-job-portal","Unpatched Oracle PeopleSoft Flaw Lets ShinyHunters Breach FBI Job Portal","A contractor supporting the FBI's job portal failed to apply a critical security patch to an Oracle PeopleSoft platform, leaving a known vulnerability (CVE-2026-35273) open for exploitation by the ShinyHunters threat group. The breach exposed personal details of thousands of FBI employees, demonstrating how a single unpatched system in a third-party managed environment can compromise a high-value government asset. This incident highlights the compounded risk of relying on contractors without enforcing strict, auditable patch compliance requirements. It also underscores that threat actors actively monitor public vulnerability disclosures and move quickly to exploit unpatched systems, making timely patching a non-negotiable security control.",[166,167,168,169,170,171,172,173,174,175],"CIS Control 7: Continuous Vulnerability Management","CIS Control 15: Service Provider Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 SA-9: External Information System Services","NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning","NIST Cybersecurity Framework: ID.SC-4 (Supply Chain Risk Management)","NIST Cybersecurity Framework: PR.IP-12 (Vulnerability Management Plan)","ITIL: Change and Release Management (patch lifecycle)","GDPR Article 32: Security of Processing (technical measures to ensure data protection)","ISO\u002FIEC 27001 A.12.6.1: Management of Technical Vulnerabilities",{}]