[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fELmV0_W5R4wjQ8Uy-MeKN_zDkuGQrIEd9n6AvNWqYyw":3},{"article":4,"iocs":45,"watch_terms":46,"solutions":47,"lesson":139},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":32},"7ec3ed80-e471-4560-8814-27c222a1714c","FBI Removes Accenture Contractor Over ShinyHunters Job Site Data Breach","fbi-removes-accenture-contractor-over-shinyhunters-job-site-data-breach-3738ff","The FBI removed a contractor over a ShinyHunters-linked breach. Reuters sources identified Accenture and an unpatched Oracle PeopleSoft system.","The FBI has removed a contractor from Accenture following a data breach that exposed sensitive information. Sources indicate the breach was linked to the ShinyHunters threat group and exploited an unpatched Oracle PeopleSoft system within Accenture's infrastructure.","FBI removes contractor over Accenture data breach linked to ShinyHunters.","https:\u002F\u002Fhackread.com\u002Ffbi-removes-accenture-contractor-shinyhunters-data-breach\u002F",null,"2026-10-06T16:41:44+00:00","2026-10-06T18:00:10.220817+00:00",7,[17,20,23,26],{"name":18,"type":19},"Accenture","vendor",{"name":21,"type":22},"ShinyHunters","threat_actor",{"name":24,"type":25},"Oracle PeopleSoft","product",{"name":27,"type":19},"FBI","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":28,"icon":12,"name":30,"slug":31},"Breaches","breaches",[33,38,40],{"category":34},{"id":35,"icon":12,"name":36,"slug":37},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":39},{"id":28,"icon":12,"name":30,"slug":31},{"category":41},{"id":42,"icon":12,"name":43,"slug":44},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,27,24],{"controls":48,"vendors":132},[49,78,107],{"slug":50,"name":51,"problem":52,"products":53},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[54,62,70],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":79,"name":80,"problem":81,"products":82},"patch-management","Automated patch management","Known holes get closed in days, not months.",[83,91,99],{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"slug":108,"name":109,"problem":110,"products":111},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[112,119,127],{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":114,"url":117,"description":118},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":128,"product_name":129,"url":130,"description":131},"axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",[133],{"slug":134,"name":135,"logo_path":136,"roles":137},"oracle","Oracle","\u002Fvendor-logos\u002Foracle.png",[138],"affected",{"slug":140,"title":141,"body":142,"framework_refs":143,"framework_notes":154},"unpatched-oracle-peoplesoft-system-enables-shinyhunters-breach-via-fbi-contractor","Unpatched Oracle PeopleSoft System Enables ShinyHunters Breach via FBI Contractor","The breach stemmed from an unpatched Oracle PeopleSoft system within Accenture's infrastructure, which was exploited by the ShinyHunters threat group to access sensitive data. This incident highlights the compounded risk of third-party contractor relationships — a vulnerability in a vendor's environment can directly compromise a high-value client such as the FBI. Failure to maintain timely patching cadences on enterprise HR and ERP platforms like PeopleSoft creates well-known, easily exploitable attack surfaces. The removal of the contractor underscores that supply chain partners are held accountable for security failures, yet the damage to sensitive government-adjacent data had already been done. Organizations must treat contractor-managed systems with the same rigor as internally managed critical infrastructure.",[144,145,146,147,148,149,150,151,152,153],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 7: Continuous Vulnerability Management","CIS Control 15: Service Provider Management","NIST SP 800-161: Supply Chain Risk Management Practices","NIST SI-2: Flaw Remediation","NIST SA-9: External Information System Services","NIST CA-7: Continuous Monitoring","ISO\u002FIEC 27036: Information Security for Supplier Relationships","GDPR Article 28: Processor Obligations and Data Processing Agreements","NIST CSF PR.IP-12: Vulnerability Management Plan",{}]