Attackers probe patched Oracle EBS bug; PeopleSoft zero-day is three flaws
ShinyHunters used CVE-2026-35273 for theft and extortion; ZDI says Oracle bundled three PeopleSoft bugs under one CVE.
82
Threat actor
ShinyHunters
- Mentions · 7d5
- Mentions · 30d68
- All mentions181
- First seenAug 12, 2026
- Last mentioned2d ago
Timeline
181 articles · newest firstUnit 42 warns retailers of ransomware, extortion and DDoS
As of September 30, 2026, operators had claimed 565 retail victims, with median revenue about $22 million.
34
ShinyHunters PeopleSoft zero-day is three flaws under CVE-2026-35273
Unauthenticated SSRF to the loopback-trusted admin hub yields code execution on PeopleTools 8.61 and 8.62.
82
ShinyHunters mass-exploits PeopleSoft SSRF-to-RCE bug CVE-2026-35273
A gateway request forgery can satisfy localhost trust checks and reach a file-write path to code execution.
84
Check Point weekly brief covers Onamae intrusion, PHP exploits, GitLab RCE
The October 26 bulletin also flags an exploited Arista flaw, a LiteLLM package compromise, and the Aokigahara infostealer.
66
Roundup: Tor exit hijacks, Heartbreaker ransomware, and platform breaches
A researcher says 333 Tor exits, about a tenth of them, captured SSH passwords and tried to plant Ebury.
58
Flare says Scattered Spider, LAPSUS$ and ShinyHunters are separate clusters
Shared branding does not prove one gang; Flare treats original LAPSUS$ as defunct after September 2022.
48
FBI suspects consulting executive helped run ShinyHunters extortion site
Edward Dubrovsky was arrested October 8; sources say shinywire.com listed nearly 100 organizations through October 16.
74
FBI probes alleged ShinyHunters ties to ransom negotiators
Canadian executive Edward Dubrovsky was arrested and charged with extortion; an unnamed U.S. firm’s executive is also suspected, with no charges yet.
74
FBI suspects a ransom negotiator ran ShinyHunters extortion site
Sources say an unnamed US consulting executive helped run shinywire.com; that person has not been charged.
74
When Your Ransomware Negotiator Works for the Other Side
FBI arrested ransomware negotiator Edward Dubrovsky on extortion charges tied to ShinyHunters, which also stole FBI employee data.
82
The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
Talos says 2026 CVE volume passed 70,000 while KEV growth lagged, so discovery is not exploitation.
58
Legal Aid Agency cyberattack: Compromised data goes back to 1978
The UK Legal Aid Agency says its 2025 cyberattack exposed records dating to 1978, including about 250,000 pre-2007 files.
68
Anthropic Warns AI Agents Can Now Automate the Entire Cyber Kill Chain
Anthropic says criminals and state-linked actors used Claude agents to automate phishing, credential theft, and data theft.
82
Phase Eight, Hobbs and Whistles owner joins growing list of fashion retailers targeted by hackers
TFG London says an October 11 attack hit systems for Phase Eight, Hobbs and Whistles; data exposure remains unconfirmed.
58
Ransomware gets personal: 'We-know-where-you-are kind of stuff'
Semperis survey finds 37% of ransomware cases include psychological or physical threats against staff and families.
66
ShinyHunters: Six Years of Cybercrime — Expert Analysis and Ransomware Group Perspectives
SuspectFile reviews six years of ShinyHunters activity, but the excerpt lacks new incident details.
18
Owner of fashion brands Hobbs and Whistles joins autumn pwned collection
TFG London's Hobbs, Phase Eight, and Whistles brands are disrupted after an October 11 cyberattack.
58
ShinyHunters arrest number three: a Canadian ransomware negotiator
FBI arrested Canadian negotiator Edward Dubrovsky on extortion charges in its ShinyHunters crackdown, the third recent detention.
67
Prominent Ransomware Negotiator Faces Extortion Charges
Edward Dubrovsky, a prominent ransomware negotiator, was charged in Pennsylvania with extortion conspiracy.
70
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More
Attackers exploited critical Atlassian flaw CVE-2026-21589 within hours, alongside arrests, malware updates, and certificate hijacks.
82
FBI Arrests Suspect in FBI-Hacking Case
FBI arrested a suspect linked to ShinyHunters' September breach that exposed data on the FBI's own agents.
50
FBI Arrests Canadian Cybersecurity Executive in ShinyHunters-Linked Cybercrime Investigation
FBI arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania, linked to the ShinyHunters extortion investigation.
60
FBI Arrests Cybersecurity Executive in ShinyHunters-Linked Extortion Investigation
FBI arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania over alleged ShinyHunters extortion conspiracy.
65
Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
FBI arrested Canadian expert Edward Dubrovsky over alleged ShinyHunters extortion, including an FBI systems intrusion.
76
Imagine there's no Shiny Hunters – AI could make human hacking crews obsolete
FBI reported another ShinyHunters arrest after an FBI data breach, while Mythos found an exploited bug.
73
Net Closes Around ShinyHunters with Another FBI Arrest
FBI arrested Canadian executive Edward Dubrovsky, alleging he conspired with ShinyHunters after the FBIjobs.gov breach.
84
FBI Arrests Another Suspected ShinyHunters Hacker Linked to FBIJobs.gov Breach
The FBI arrested another suspected ShinyHunters member linked to the FBIJobs.gov breach of employee personal data.
73
Risky Bulletin: ShinyHunters suspects arrested in US and Jordan
Roundup: hackers stole data on 8.8 million Danes, and Oracle confirmed a 20-million-patient health breach.
86
Security Affairs newsletter Round 599 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs round 599 collects weekly headlines on breaches, arrests, ransomware, and exploited flaws.
32
Cyber exec arrested in case allegedly tied to ShinyHunters hackers
Canadian cyber executive Edward Dubrovsky was arrested on extortion charges allegedly tied to ShinyHunters.
76
Canadian cybersecurity executive arrested in federal extortion case
Canadian CYPFER founder Edward Dubrovsky was arrested in Pennsylvania on federal extortion charges linked to ShinyHunters.
72
FBI announces yet another arrest allegedly connected to the FBI Jobs hack
FBI arrested a Canadian cybersecurity firm's co-founder over alleged ties to the ShinyHunters FBI Jobs hack.
61
FBI Arrests Founder of Ransomware Negotiation Firm
The FBI arrested Canadian ransomware-negotiation executive Edward Dubrovsky on extortion charges tied to ShinyHunters.
80
FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack
FBI arrested an unnamed Canadian in Pennsylvania as another ShinyHunters suspect in the jobs-portal breach.
75
What We Missed: FBI Strikes Back at ShinyHunters
Dark Reading recaps an FBI arrest of a suspected ShinyHunters operative and a Pentagon data-center compromise.
50
FBI arrests another suspected ShinyHunters hacker after agency breach
FBI arrested another suspected ShinyHunters member linked to the recent breach of an FBI jobs platform.
81
FBI touts another ShinyHunters arrest in response to data breach
The FBI arrested another alleged ShinyHunters member after the group stole sensitive data on nearly every bureau employee.
90
EY Data Breach Exposes Goldman Sachs and Man Group Clients’ Tax and Financial Data
EY says a tax-platform breach exposed Goldman Sachs and Man Group clients' personal and financial data.
78
ShinyHunters Extorted Boeing Spin-off Prior to Arrests
Suspected ShinyHunters leader 'Rey' was detained in Jordan while extorting Boeing spin-off Jeppesen ForeFlight, and is cooperating with the FBI.
78
Related CVEs
by mentions- CVE-2026-3527397%9.8Unauthenticated Takeover Flaw in Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-7289899%10.0Unauthenticated SQL Injection in Metabase Grants Admin Access
- CVE-2026-1042865%9.8Unauthenticated path traversal file write in Fortinet FortiMail
- CVE-2025-61882100%9.8Unauthenticated Takeover of Oracle E-Business Suite Concurrent Processing
- CVE-2026-2158999%9.3Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
- CVE-2026-9361692%9.8Unauthenticated RCE in Check Point Management Server via Directory Traversal and File Upload
- CVE-2026-1146251%9.4SQL injection in Arista VeloCloud Orchestrator grants superuser
- CVE-2026-84521%8.8Memory Buffer Overflow in Citrix NetScaler ADC/Gateway Exploited in the Wild
- CVE-2023-240592%7.3Grand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in January 2023
Appears with
- FBIorganization · 85
- FBIvictim · 58
- Oraclevendor · 47
- Mandiantorganization · 20
- Oracle PeopleSoftproduct · 20
- PeopleSoftproduct · 19
- Oracleorganization · 19
- Microsoftvendor · 18
- Anthropicvendor · 18
- McKessonvictim · 15
- Clopthreat actor · 15
- Googlevendor · 15
- Accentureorganization · 14
- AWS GovCloudproduct · 13
- Claudeai model · 12
- FBIjobs.govproduct · 12
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.