FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day
FBI job portals stay offline after ShinyHunters claimed a PeopleSoft zero-day breach of personnel data.
88
Product
MeshAgent
- Mentions · 7d0
- Mentions · 30d0
- All mentions6
- First seenSep 18, 2026
- Last mentionedSep 28, 2026
Timeline
6 articles · newest firstOracle PeopleSoft Servers Targeted Again as ShinyHunters Expands Extortion Operations
ShinyHunters-linked UNC6240 is mass-exploiting Oracle PeopleSoft CVE-2026-35273, bypassing WAF path filters for extortion.
84
Microsoft Finds Ransomware Group Using Same Attack Blueprint Across Multiple Malware Families
Microsoft says affiliate Storm-2570 reused one playbook across Qilin, DragonForce, Anubis, and BERT.
74
New SETTRA Ransomware Uses MeshAgent RMM and BYOVD to Encrypt Windows Systems
Huntress reports new Settra ransomware hit retail and manufacturing firms, using MeshAgent RMM, BYOVD, and Windows utilities to encrypt systems and block recovery.
65
New Settra Ransomware Variant Deployed in Attacks on Retail and Manufacturing
Huntress details a new Settra ransomware variant deployed against retail and manufacturing victims since June, using MeshAgent RMM, recovery sabotage, and BYOVD techniques.
62
New SETTRA Ransomware Uses MeshAgent RMM and BYOVD to Encrypt Windows Systems
New SETTRA ransomware operation abuses MeshAgent RMM for persistence, BYOVD via gdrv.sys, log clearing, and Windows recovery sabotage to encrypt systems.
52
Related CVEs
by mentions- CVE-2026-3527397%9.8Unauthenticated Takeover Flaw in Oracle PeopleSoft Enterprise PeopleTools
Appears with
- Settrathreat actor · 3
- Microsoftvendor · 3
- Windowsproduct · 2
- PeopleSoftproduct · 2
- ShinyHuntersthreat actor · 2
- Huntressorganization · 2
- Settramalware · 2
- Mandiantorganization · 2
- Oraclevendor · 2
- Google Cloudorganization · 1
- BERTmalware · 1
- ngrokproduct · 1
- SETTRA ransomwaremalware · 1
- Qilinmalware · 1
- Cloudflare Tunnelproduct · 1
- DragonForcemalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.