Hackers publish work details on more than 41,000 DHS employees
The Icepick dump lists ICE, CBP and CISA contacts and internal groups; DHS calls it a potential breach.
76
- Mentions · 7d10
- Mentions · 30d31
- All mentions67
- First seenAug 18, 2026
- Last mentioned2d ago
Timeline
67 articles · newest firstHacker leaks work contacts for more than 40,000 DHS employees
Records cover CBP, ICE, and CISA staff; the leaker claims an Okta SSO source, which Okta says it has no evidence was compromised.
76
Leak exposes records on more than 41,000 DHS workers
The archive includes emails, phones, office addresses, and groups tied to undercover and surveillance programs.
86
Department of Peace leaks records on over 41,000 DHS employees
The posted set includes work contacts, job details, and which internal systems each account can reach; Okta denies a compromise.
78
Hacktivists publish records of more than 41,000 DHS employees
The Icepick dataset, published October 28, covers ICE and CBP staff and groups tied to undercover work; Okta denies a breach.
78
Leak exposes personal details of over 41,000 DHS employees
Distributed Denial of Secrets published records it attributes to “Department of Peace”; Reuters matched some entries but not the collection method.
78
DDoSecrets publishes records of 41,000 DHS personnel, including undercover links
The Icepick archive, last updated August 19, lists emails, phones, supervisors, and more than 55,000 permission groups across seven DHS components.
76
Leak site publishes data on more than 41,000 DHS employees
Hacktivists calling themselves Department of Peace say they took an Okta SSO database; Okta denies any compromise.
78
Hacker publishes work data on more than 40,000 Homeland Security employees
The dataset covers CBP, ICE, and CISA contacts plus application-access groups; Okta denies its systems were breached.
78
Leak details more than 41,000 Homeland Security workers and access groups
DDoSecrets published the archive as Icepick; group names reference undercover work, wiretaps, and surveillance tools.
78
Okta Access Gateway before 2026.10.2 allows admin command execution
CVE-2026-115547 scores 9.1 but needs Admin Console access; Okta reports no active exploitation and no workaround.
62
Okta Access Gateway before 2026.10.2 allows admin command execution
CVE-2026-115547 is scored 9.1 but needs Admin Console privileges, and the advisory reports no known exploitation.
64
Okta and Auth0 are removing trust in eMudhra emSign ECC Root CA – G3
Derived keys for eight intermediates can mint certificates for any domain; Okta reports no exploitation.
74
Okta and Auth0 are removing trust in eMudhra emSign ECC Root CA – G3
Derived keys for eight intermediates can mint certificates for any domain; Okta reports no exploitation.
74
Node.js Brotli flaw allows crash or RCE (CVE-2026-111497)
Okta has patched production and is rolling the fix through Auth0, with no exploitation observed.
68
Exaforce says GitHub token theft and vishing drain data in minutes
A dormant OAuth token pulled 472 of 638 repositories; ClickFix and help-desk vishing followed the same pattern.
36
ARTEX-using actor expands targeting of IT and software vendors
The operator password-sprayed engineers, tested unsigned JWTs, and probed cross-tenant access on Okta, Entra ID and Cognito.
76
Okta cloud unaffected by PHP2Shell; Access Gateway needs patch
Okta is still investigating CVE-2026-109618 and CVE-2026-109619, with on-prem remediation unfinished.
55
Ransomware crews threatened employees' families at 37% of surveyed firms
Semperis surveyed 1,200 professionals at organizations already hit; 59% paid and 87% saw identity systems targeted.
54
Employees using personal ChatGPT at work? Here's what IT admins need to do
NordLayer pitches AI Scout to block employees from pasting sensitive data into personal ChatGPT accounts.
18
Ransomware Attacks Intensify: Criminals Shift Focus to Target Employees and Their Families
Semperis says 37% of successful ransomware attacks included threats against employees’ friends or relatives.
74
AI Used in 84% of Ransomware Attacks as Identity Infrastructure Comes Under Fire.
Semperis survey of 1,200 ransomware victims finds AI in 84% of incidents and identity systems widely targeted.
64
FBI arrests another suspected ShinyHunters hacker after agency breach
FBI arrested another suspected ShinyHunters member linked to the recent breach of an FBI jobs platform.
81
The people who know passkeys best are still typing passwords
Yubico and Okta found 43% of security professionals still sign in with passwords despite knowing passkeys.
41
Half of Cybersecurity Pros Still Rely on Passwords Despite Security Concerns
Yubico and Okta found nearly half of security professionals still use passwords while AI-driven phishing rises.
48
12 Best Fine-Grained Authorization Tools Compared (2026): Features & Pricing
A 2026 roundup compares twelve fine-grained authorization tools, led by Auth0 FGA, Oso, and Cerbos.
20
12 Best Authentication-as-a-Service (AaaS) Providers Compared (2026): Features & Pricing
A 2026 comparison names Auth0 the leading authentication-as-a-service platform, with Entra External ID and Cognito as cheaper alternatives.
17
11 Best Cloud Directory Services Compared (2026): Features & Pricing
A 2026 buyer's guide ranks Microsoft Entra ID the top cloud directory, ahead of JumpCloud and Okta Universal Directory.
16
Top 10 Best Fine-Grained Authorization Tools in 2026 [Ranked & Scored]
A 2026 ranking puts Auth0 FGA, SpiceDB, and Permit.io atop fine-grained authorization tools.
16
11 Best CIAM Solutions Compared (2026): Features & Pricing
A 2026 buyer guide ranks Auth0 the best overall CIAM and Cognito plus Entra External ID the cheapest.
15
12 Best Passwordless Authentication Solutions Compared (2026): Features & Pricing
A 2026 roundup names Microsoft the best workforce passwordless start and HYPR the dedicated platform.
14
12 Best SSO Solutions Compared (2026): Features & Pricing
A 2026 comparison ranks 12 SSO platforms, favoring Microsoft Entra ID for Microsoft 365 and Okta for mixed SaaS.
22
12 Best IGA Tools Compared (2026): Features & Pricing
A 2026 buyer's guide ranks SailPoint the top identity governance platform, with Saviynt and Entra ID Governance close behind.
24
12 Best IAM Solutions Compared (2026): Features & Pricing
A 2026 buyer's guide ranks 12 IAM products, favoring Entra ID and Okta for workforce identity.
18
12 Best IGA Tools in 2026: The Ranked Buyer’s Guide
A 2026 buyer's guide ranks 12 IGA platforms, naming SailPoint best for large enterprise programs.
18
One Bad Prompt Took Down a Company’s Salesforce: RSA’s Jim Taylor on Agent ID and Taming the 4,000 Shadow AI Agents Hiding in Your Enterprise
RSA launched Agent ID to discover, secure, and govern enterprise AI agents after finding thousands of shadow agents.
62
Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI
Okta webinar says organizations should govern AI agents as identities to limit excessive access and shadow AI.
30
Top 10 Best Adaptive / Risk-Based Authentication Tools in 2026 [Ranked & Scored]
A 2026 ranking scores ten adaptive authentication tools, placing Microsoft Conditional Access first.
18
Top 10 Best Authentication-as-a-Service (AaaS) Providers in 2026 [Ranked & Scored]
A 2026 ranking names Auth0, Microsoft Entra External ID, and Firebase Auth the leading authentication-as-a-service providers.
17
Top 10 Best Cloud Directory Services in 2026 [Ranked & Scored]
A 2026 ranking puts Microsoft Entra ID first among cloud directories, ahead of JumpCloud and Okta.
18
Related CVEs
by mentions- CVE-2026-78623<1%9.9SQL Injection in Okta Access Gateway via Unsanitized SAML Assertion Values
- Authenticated command injection in Okta Access Gateway Admin Console
- CVE-2026-85982<1%9.0Stored XSS in Auth0 AD/LDAP Connector Admin Panel
- CVE-2026-78626<1%6.5Authorization Bypass in Okta Access Gateway Protected Rule Checks
- CVE-2026-11149783%9.2Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2021-19052%7.8Use-After-Free in Qualcomm Snapdragon Chipsets Allows Local Privilege Escalation
- CVE-2018-9568<1%7.8In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion
Appears with
- Microsoftvendor · 35
- Ping Identityvendor · 14
- Googlevendor · 13
- Oktaproduct · 10
- Microsoft Entra IDproduct · 10
- Department of Peacethreat actor · 9
- Oktaorganization · 9
- Auth0product · 8
- Amazonvendor · 8
- Ciscovendor · 7
- IBMvendor · 7
- Distributed Denial of Secretsorganization · 6
- Immigration and Customs Enforcementvictim · 6
- Cisco Duoproduct · 6
- OneLoginvendor · 6
- Anthropicvendor · 5
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.