
Weekly Update 523: Live From a Norwegian Fjord
Troy Hunt's weekly update highlights ShinyHunters simultaneously targeting Cl0p and the FBI, calling it a likely crescendo.
9 stories, newest first · one card per story

Troy Hunt's weekly update highlights ShinyHunters simultaneously targeting Cl0p and the FBI, calling it a likely crescendo.

Roundup: ShinyHunters defaced Cl0p’s leak site, new secret-stealing implants emerged, and US water credentials were exposed.
ShinyHunters hijacked Cl0p's dark web leak site and issued an eight-figure extortion demand, threatening to expose victim payment records and name Cl0p operators.

ShinyHunters hijacked and defaced rival ransomware gang Clop's dark-web leak site.
Extortion group ShinyHunters hacked the Clop ransomware gang's leak site, defacing it and stealing server data and onion service private keys.

CL0P ransomware group listed Harley-Davidson on its extortion leak site, claiming a compromise; the motorcycle maker has not confirmed any breach.

Cyble argues supply chain attacks are a primary breach vector, citing Verizon DBIR third-party figures and CISA SBOM guidance to pitch its TPRM platform.

US agencies warn of AI-assisted attacks on exposed Siemens PLCs; the week also saw GitLab CVE-2026-19478 exploited and trojanized npm packages found.

Cl0p claims over 40 organizations including Shell and Philips were breached by exploiting critical RCE CVE-2026-12569 in PTC Windchill and FlexPLM.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views