ShinyHunters

Google’s Threat Intelligence Group infiltrated TeamPCP, a supply chain hacking collective, allowing the company to monitor attacks from within and…

The Florida Department of Highway Safety and Motor Vehicles confirmed a security breach in its DAVID driver database, attributing the…

Anthropic thwarted a coordinated campaign from December 2025 to August 2026 involving cybercriminals and state-sponsored actors from Russia and China…

Anthropic forced a logout for Claude users to secure accounts hijacked by infostealer malware, highlighting the growing threat of credential…

McKesson is investigating a data breach involving unauthorized access to third-party applications, which has been claimed by the ShinyHunters cybercrime…

McKesson confirmed a significant cybersecurity breach in an SEC filing, acknowledging unauthorized access to third-party applications and the potential theft…

ShinyHunters claimed responsibility for a data breach exposing personal information of 1.6 million RingCentral accounts, including names, emails, phone numbers,…

The City-Forum campaign exploits misconfigured Salesforce Experience Cloud and ServiceNow portals to steal sensitive data via unauthenticated guest access, with…

Amgen confirmed a data breach in July 2026 involving theft of corporate files and patient health information from third-party cloud…

ShinyHunters is increasingly targeting healthcare organizations by breaching cloud SaaS and storage platforms through supply chain and identity attacks, using…

The ShinyHunters extortion group has claimed responsibility for the Ernst & Young data breach, alleging they obtained access credentials through…

Threat actors are exploiting email addresses from data breaches linked to ShinyHunters to send sextortion scams demanding $2,000 in Bitcoin,…

Abbott Laboratories is investigating two separate cybersecurity incidents: unauthorized access to legacy Exact Sciences systems in its Cancer Diagnostics division…

Starting September 2026, Microsoft Entra ID will make passkeys the default authentication method for enterprise users, automatically enabling them for…

Medtronic is notifying customers of a cybersecurity breach by the ShinyHunters extortion group, which exposed sensitive data including names, Social…

A critical unauthenticated vulnerability (CVE-2026-46817, CVSS 9.8) in Oracle E-Business Suite's Payments component is being actively exploited, with threat intelligence…

Nissan confirmed a breach via a zero-day vulnerability in Oracle PeopleSoft (CVE-2026-35273), exposing sensitive personal data including Social Security numbers,…

The Canvas data breach affected approximately 160 UK higher education institutions and up to 9,000 globally, with threat actors stealing…

Meta is testing face-recognition software from military supplier Rank One for potential integration into its smart glasses, while Anthropic's new…

Klue suffered an OAuth security breach where threat actor "Icarus" stole Salesforce CRM data from multiple organizations by compromising Klue's…