CVE Tools
Track your stack

ShinyHunters suspects arrested in US and Jordan

Risky Business NewsBy Catalin Cimpanu

Reported exploitedOracle PeopleSoftShinyHuntersExchange Server

Our summary

US and Jordanian authorities each detained a suspected member of the ShinyHunters hacking collective last week. The FBI arrested Canadian cybersecurity professional Edward Dubrovsky in Pennsylvania, whom Director Kash Patel linked to last month's intrusion into the FBI's own job application portal. Separately, Jordan detained Saif al-Din Khader, allegedly the ShinyHunters figure known as "Rey," who is reportedly now cooperating with the FBI to identify other group members. The arrests come as fallout from the FBI breach continues, including Accenture losing its FBI contract after failing to patch the Oracle PeopleSoft systems that ShinyHunters exploited to steal data on nearly all FBI special agents.

Read at Risky Business News

Risky Business News publishes this story on its own site; we link to it rather than reprint it.

  1. Check Point Research12th October – Threat Intelligence ReportCVE-2026-21589, CVE-2026-88779
  2. Help Net SecurityWeek in review: FortiBleed is still active, Patch Tuesday forecastCVE-2026-21589, CVE-2026-88779
  3. The Hacker News⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware ArrestsCVE-2026-104286, CVE-2026-88779
  4. The Hacker News⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and MoreCVE-2026-21589
  5. BleepingComputerCitrix warns admins to patch new NetScaler RCE flaw immediatelyCVE-2026-88779
  6. SecurityWeekCitrix Urges Immediate Patching of Critical NetScaler VulnerabilityCVE-2026-88779
  7. Cisco TalosMaking sure the checks get printedCVE-2026-88779
  8. SecurityWeekAttackers Target Critical Atlassian Vulnerability Within Hours of PoC PublicationCVE-2026-21589
  9. SANS Internet Storm CenterScans for Atlassian vulnerablity (CVE-2026-21589) - SANS ISCCVE-2026-21589
  10. Help Net SecurityExploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)CVE-2026-21589

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure