Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
13 / 92 results
criticalperson_alertThreat ActorShinyHunters Exploits Oracle PeopleSoft CVE-2026-35273 via WAF Bypass
ShinyHunters is a financially motivated cybercrime group (tracked by Mandiant as UNC6240) with an established pattern of data theft extortion. The group originated as GnosticPlayers before rebranding to ShinyHunters in 2020.
highperson_alertThreat ActorClop Ransomware Leak Site Compromised via Grav CMS Path Traversal Flaw
This incident involves two distinct threat actors: Clop, a financially motivated ransomware operation known for large-scale data extortion campaigns, and ShinyHunters, a cybercrime actor specializing in data breaches and database theft.
criticalperson_alertThreat ActorShinyHunters Claims FBI Breach via Oracle PeopleSoft Zero-Day
ShinyHunters is a financially-motivated cybercrime group active since 2019, known for large-scale data breaches and extortion operations. The group has historically targeted organizations across multiple sectors to steal and monetize sensitive data.
highperson_alertThreat ActorShinyHunters Breaches Clop Ransomware Gang's Leak Site via Grav CMS Flaw
ShinyHunters is an extortion gang active since at least 2019, known for data theft operations and high-profile breaches. The group uses Umbreon (Pokémon) as its logo and has previously defaced HackForums in August 2020.
highperson_alertThreat ActorShinyHunters and Helix Linked to Passkey-Themed M365 Phishing Campaign
ShinyHunters and Helix are cybercrime actors linked to data extortion operations. Both groups have established reputations in the underground economy for compromising corporate environments and exfiltrating sensitive data for extortion or sale.
highperson_alertThreat ActorShinyHunters Breaches AdaptHealth, Exposing 4.1M Patient Records
ShinyHunters is a financially motivated cybercrime group known for large-scale data theft and extortion operations. The group typically targets organizations to steal sensitive data, then demands ransom payments in exchange for not publicly leaking t…
highperson_alertThreat ActorShinyHunters Claims Breach of Florida DMV DAVID Database
ShinyHunters is a financially motivated cybercrime extortion gang known for conducting data breaches targeting organizations with large databases of personally identifiable information (PII).
criticalperson_alertThreat ActorShinyHunters Claims 284M Patient Records from McKesson Breach
ShinyHunters is a financially motivated cybercrime group known for large-scale data theft and extortion operations targeting organizations with valuable databases.
highperson_alertThreat ActorShinyHunters Publishes 12.9M Carhartt Customer Records After Breach
ShinyHunters is a financially motivated extortion group known for large-scale data theft and public leak operations. The group operates by exfiltrating sensitive data from compromised organizations, demanding ransom payments, and publishing stolen re…
highperson_alertThreat ActorShinyHunters targets ReliaQuest in failed social engineering attack
ShinyHunters is a notorious data extortion group known for large-scale data breaches and credential theft operations. In this incident, the group demonstrated advanced social engineering capabilities by impersonating ReliaQuest security personnel to…
highperson_alertThreat ActorShinyHunters Breaches RingCentral, Leaks 1.6M Account Records
ShinyHunters is a financially motivated extortion group that operates a "pay or leak" model, demanding ransom payments from breached organizations and publishing stolen data on dark web leak sites when victims refuse to pay.
highperson_alertThreat ActorShinyHunters Breaches Brinks Home via Microsoft Entra Vishing Attack
ShinyHunters is a financially motivated cybercrime extortion gang known for large-scale data theft and public leak operations. The group specializes in breaching organizations to exfiltrate sensitive customer and employee data, which they leverage fo…
highperson_alertThreat ActorShinyHunters escalates vishing-driven data theft against healthcare sector
ShinyHunters is a financially motivated extortion gang specializing in data theft attacks against cloud SaaS and storage platforms. The group has gained notoriety over the past two years for conducting supply chain attacks on third-party integration…