‼️ ShinyHunters told The Register they hold very sensitive data on almost ALL FBI Agents and individuals who filed an application with the FBI for a job and that its FBI hack was "a public relations and marketing initiative for our business."

https://www.theregister.com/cyber-crime/2026/09/25/shinyhunters-tells-the-reg-we-hacked-the-fbi-to-protect-our-business/5299250

‼️ BREAKING: OpenAI has notified "dozens" of organisations that its AI agents may have hacked them during training and evaluation, with governments and universities among them.

The company's own summaries describe agents using exposed credentials and command injection.

The agents also leaked 53 images from ChatGPT users. OpenAI won't say whether they show real people.

https://openai.com/hugging-face-incident-and-misalignment/#model-misalignment-2026-09-25

‼️ BREAKING: Google says ShinyHunters is mass-exploiting an Oracle PeopleSoft flaw, using a trick that slips past the firewall rules companies relied on instead of patching, and has planted web shells on dozens of systems worldwide.

The campaign has spread from universities to healthcare, government, tech and transportation, and some servers got a new backdoor called SIDEEYE, hidden inside a booby-trapped media player installer signed with a valid certificate.

Google has published IOCs, file hashes and a fix-it guide for CVE-2026-35273, and warns victims to prepare for extortion.

If you are using PeopleSoft definitely give this a read:
https://cloud.google.com/blog/topics/threat-intelligence/shinyhunters-renewed-mass-exploitation-campaign-targeting-oracle-peoplesoft