Threat actor
ShinyHunters
Tracked by CyberSIXT since 1 Apr · last activity 19 Oct
- CVEs linked · all time
- 9
- in CISA KEV · all time
- 8
- articles · all time
- 153
48 articles since 11 Sep.
Show as table
| Day (UTC) | Articles |
|---|---|
| Sat 19 Sep | 1 |
| Mon 21 Sep | 4 |
| Tue 22 Sep | 1 |
| Wed 23 Sep | 6 |
| Thu 24 Sep | 1 |
| Fri 25 Sep | 1 |
| Sat 26 Sep | 1 |
| Mon 28 Sep | 6 |
| Tue 29 Sep | 5 |
| Wed 30 Sep | 1 |
| Sat 3 Oct | 1 |
| Sun 4 Oct | 2 |
| Mon 5 Oct | 2 |
| Tue 6 Oct | 3 |
| Wed 7 Oct | 2 |
| Fri 9 Oct | 2 |
| Sat 10 Oct | 2 |
| Mon 12 Oct | 3 |
| Tue 13 Oct | 1 |
| Thu 15 Oct | 1 |
| Fri 16 Oct | 1 |
| Mon 19 Oct | 1 |
CVEs
9 CVEsCVE-2025-61882Oracle E-Business Suite Unspecified VulnerabilityCVSS9.8CriticalExploited99.7%EPSS7articles
CVE-2026-35273Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityCVSS9.8CriticalExploited97%EPSS28articles
CVE-2026-85102Check Point Multiple Products Improper Certificate Validation VulnerabilityCVSS9.8CriticalExploited54%EPSS8articles
CVE-2026-94127F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityCVSS9.8CriticalExploited2.2%EPSS10articles
CVE-2026-33634Aquasecurity Trivy Embedded Malicious Code VulnerabilityCVSS9.4CriticalExploited1.8%EPSS10articles
CVE-2026-0300Palo Alto Networks PAN-OS Out-of-bounds Write VulnerabilityCVSS9.3CriticalExploited32%EPSS14articles
CVE-2026-87902WordPress Core Remote File Inclusion VulnerabilityCVSS8.1HighExploited40%EPSS10articles
CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityCVSS7.2HighExploited34%EPSS7articles
CVE-2026-42542TDengine has an integer underflow in uvConnMayGetUserInfo() allows unauthenticated remote crash (DoS)CVSS7.5High–Not in KEV0.6%EPSS2articles
- US Investigators Probe Ransom Negotiators’ Ties to ShinyHuntersKrebs on Security
- Ransomware Negotiator’s Arrest Exposes Crisis Vendor Vetting GapsDark Reading
- UK Legal Aid Agency Breach Exposed Data Dating Back Before 2007DataBreaches
- Experts and Ransomware Groups Weigh In on ShinyHunters’ FutureDataBreaches
- Canadian Ransomware Negotiator Arrested in FBI ShinyHunters CrackdownSecurity Affairs
- Cybersecurity Executive Arrested in FBI ShinyHunters InvestigationSecurityWeek
- FBI Arrests Canadian Cybersecurity Executive Over ShinyHunters TiesInfosecurity
- FBI Arrests Canadian Man in ShinyHunters Hack InvestigationDataBreaches
- FBI arrests ransomware negotiator in ShinyHunters extortion probeKrebs on Security
- FBI Arrests Suspected ShinyHunters Co-Conspirator in PennsylvaniaThe Hacker News
- Pentagon Data Breach Exposes Records of 3.1 Million PeopleDark Reading
- Teen ShinyHunters Member Detained During Boeing Unit Extortion AttemptKrebs on Security
- ShinyHunters Suspect Arrested in Jordan as FBI Tightens the NetMalwarebytes
- FBI Removes Accenture Contractor After Employee Data BreachSecurityWeek
- FBI Drops Accenture Contractor After Breach Exposed Staff DataSecurity Affairs
- FBI removes Accenture contractor after ShinyHunters breach exposes staff dataThe Hacker News
- Jordan Detains ShinyHunters Suspect Said to Be Helping FBISecurityOnline
- Teen Hacker Arrested After ShinyHunters Claims FBI Data BreachSecurityWeek
- ShinyHunters Suspect Cooperates With FBI to Expose Group AssociatesSecurity Affairs
- ShinyHunters Suspect Detained in Jordan and Cooperates With FBIThe Hacker News
- ShinyHunters Hacker Detained in Jordan and Reportedly Aids FBI InvestigationDataBreaches
- FBI Urges ShinyHunters Members to Turn Informant After ArrestSecurityWeek
- Dutch Hacker Faces Murder Solicitation Charges in ShinyHunters ProbeDataBreaches
- ShinyHunters Claim They Will Not Publish Stolen FBI Personnel DataDataBreaches
- Dutch Police Arrest Suspected ShinyHunters Member in Ongoing ProbeSecurityWeek
- Dutch Police Arrest Suspected ShinyHunters Member in AmsterdamThe Hacker News
- Dutch Police Arrest Alleged ShinyHunters Member in Odido ProbeSecurity Affairs
- Dutch Hacker Arrested Again as ShinyHunters Links Remain UnprovenDataBreaches
- Dutch Police Arrest Suspected ShinyHunters Hacker After Major BreachesKrebs on Security
- Check Point Warns of Active Exploits and AI-Powered AttacksCheck Point
- ShinyHunters Revive Attacks on PeopleSoft with WAF BypassSecurityWeek
- Alleged FBI Medical Records Leak Exposes Employees’ Private DetailsMalwarebytes
- Malwarebytes Warns of AI Backdoors, ClickFix Traps and PhishingMalwarebytes
- ShinyHunters Expands Global Oracle PeopleSoft Exploitation CampaignGoogle Cloud
- BragJack Lets Malicious Extensions Hijack Browser AI AssistantsSecurityWeek
- ShinyHunters Claims FBI Breach Exploited Oracle PeopleSoft Zero DaySecurityOnline
- FBI Investigates ShinyHunters Claim of Recruitment Site BreachArs Technica
- ShinyHunters Claims FBI Applicant Data Breach via Oracle FlawSecurity Affairs
- ShinyHunters Claims FBI Breach Exposed Agents’ Personal DataMalwarebytes
- ShinyHunters Claims FBI Breach Exploited Oracle PeopleSoft Zero-DayInfosecurity
- ShinyHunters Claims FBI Breach Exposed Agents’ Personal DataSecurityWeek
- ShinyHunters Claims FBI Breach Exposed Agents and Job ApplicantsThe Hacker News
- ShinyHunters Claims FBI Breach Exposed Employees’ Private DataDataBreaches
- ShinyHunters Claims Breach of Rival Clop’s Leak Site and Demands BitcoinDark Reading
- ShinyHunters Hijacks Clop Leak Site and Threatens to Expose SecretsSOCRadar
- ShinyHunters Claims It Hacked and Extorted Clop Ransomware GroupInfosecurity
- ShinyHunters Hijacks Clop Leak Site and Threatens to Expose VictimsMalwarebytes
- ShinyHunters Claims It Breached and Defaced Clop’s Leak SiteDataBreaches
- McKesson Data Breach Exposes 6.4 Million After ShinyHunters LeakDataBreaches
- ReliaQuest Says ShinyHunters Phishing Attack Was ContainedDark Reading
The latest 50 are listed. Every article is in the RSS feed.