ShinyHunters breached FBIJobs.gov, leaked personal data on roughly 5,000 Bureau personnel — including 14 staffers tied to China-focused counterintelligence — and triggered arrests in Amsterdam and Jordan. Tova Dvorin and Adrian Culley separate what the FBI confirmed from what the crew claimed: the unverified Oracle PeopleSoft zero-day, the vishing and OAuth token abuse behind 140+ breaches, and why the arrests wound the brand but not the playbook. Plus the four controls worth validating this week, starting with FIDO2.

More on this crew in Ep. 27, The Evolution of ShinyHunters: https://www.safebreach.com/podcast/the-evolution-of-shinyhunters/
And on Jaguar Land Rover in Ep. 34: https://www.safebreach.com/podcast/inside-the-jaguar-land-rover-cyberattack/

#cybersecurity #infosec #CISO #ShinyHunters #ScatteredSpider #FBI #SaaSSecurity #BAS

Rss Apple Podcaster
Podden och tillhörande omslagsbild på den här sidan tillhör SafeBreach. Innehållet i podden är skapat av SafeBreach och inte av, eller tillsammans med, Poddtoppen.