Related Threat Clusters
-
ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability
A critical zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft has been exploited by the ShinyHunters group, leading to breaches of over 100 organizations, primarily in the education sector. The vulnerability…
65 articles · Updated June 11, 2026 -
Coordinated Cyberattack Disrupts Water Utilities in Minnesota
A coordinated cyberattack affected water utilities in over 30 Minnesota communities on July 26 and 27, 2026. Key cities impacted include Plymouth, South St. Paul, Braham, and Maple Plain. The attack targeted…
324 articles · Updated July 27, 2026 -
Chronus Group Breach Exposes 36 Million Mexican Citizens' Data
In January 2026, the Chronus Group executed a significant data breach against the Mexican government, compromising 2.3 terabytes of sensitive data from at least 25 agencies. The breach exposed personal information of up…
2 articles · Updated May 28, 2026 -
Icarus Group Exploits Klue OAuth Breach to Steal Salesforce Data
In June 2026, a significant security incident involving Klue, a market intelligence platform, allowed the Icarus threat actor group to exfiltrate Salesforce CRM data from multiple organizations, including Huntress. The…
80 articles · Updated June 18, 2026 -
AI-Driven Phishing Threats Emerge from Browser Vulnerabilities
In 2026, attackers are leveraging AI to rapidly develop and evolve phishing kits, significantly outpacing traditional detection methods that rely on blocklists and IoCs. Employees are increasingly adopting unvetted AI…
8 articles · Updated June 2, 2026 -
Gainsight Apps Breach Exposes Data of Over 200 Salesforce Customers
A significant supply chain attack has compromised Salesforce-stored data from more than 200 companies through applications published by Gainsight. Salesforce confirmed unauthorized access to customer data and is…
30 articles · Updated November 23, 2025 -
Data Breaches Impact Millions Across Diverse Companies
Three companies have confirmed data breaches affecting millions of users, with each asserting that sensitive information such as passwords and payment details were not compromised. One of the affected entities, an adult…
10 articles · Updated December 16, 2025 -
ShinyHunters Target SSO Accounts in Voice Phishing Attacks
The ShinyHunters extortion gang has claimed responsibility for a series of voice phishing attacks targeting single sign-on (SSO) accounts at major platforms including Okta, Microsoft, and Google. In these attacks,…
191 articles · Updated January 25, 2026 -
Teenagers Plead Not Guilty in TfL Cyber Attack Case
Two teenagers, Thalha Jubair and Owen Flowers, have pleaded not guilty to charges related to a cyber attack on Transport for London (TfL) that resulted in significant financial losses. The attack, attributed to the…
14 articles · Updated November 21, 2025 -
DoorDash Confirms Data Breach Exposing Customer Information
DoorDash has confirmed a data breach that occurred in October 2025, affecting customers, Dashers, and merchants. The company is investigating the incident and has engaged a cybersecurity forensic firm to enhance its…
69 articles · Updated November 17, 2025
Recent Intelligence Reports
- Significant Cyber Incidents — www.csis.org · August 13, 2026
- ReliaQuest — reliaquest.com · June 18, 2026
- Oracle warns customers after ShinyHunters exploited PeopleSoft vulnerability and exposed ... — Mezha · June 11, 2026
- ShinyHunters breached 100+ companies through an unpatched Oracle PeopleSoft zero — Thenextweb · June 11, 2026
- Oracle warns of security bug that hackers abused to breach 100+ companies — Techcrunch · June 11, 2026
- Why the browser is now the front line for AI security — Bleepingcomputer · June 2, 2026
- Why the browser is now the front line for AI security — Bleepingcomputer · June 2, 2026
- ShinyHunters Salesforce Exploit Impacts Snowflake, Okta, Salesforce, More — Technadu · March 10, 2026