proomt

Search

Search posts, papers, and topics

All posts

Hacker News front pageJoseph Cox3 min readintro

'We hacked the FBI:' Hackers say they have data on all FBI employees

Read on 404media.coHN 468·340 comments

Summary

ShinyHunters alleges it breached FBI employee and applicant records by exploiting a zero‑day in Oracle PeopleSoft, stealing 2–3 TB of personal data and defacing the FBI jobs site. The claim is partially corroborated by OSINT checks, and the FBI says it is investigating the incident.

  • ShinyHunters claims to have exfiltrated 2–3 TB of FBI employee PII via a zero‑day in Oracle PeopleSoft, accessing AWS GovCloud servers.
  • Sample data of ~5 k employees was partially validated using OSINT tools, confirming names, addresses, and phone numbers.
  • The group defaced the FBI jobs portal and threatened to release more data, framing it as coercion rather than extortion.
  • FBI acknowledges the incident and is investigating; no evidence of ransom payment.

Security teams and incident responders should track this breach as it exposes high‑value PII of law‑enforcement personnel and demonstrates the impact of supply‑chain exploits in enterprise software.

5/10
securityawsdata breachpeoplesoftosint

Related reading

  1. September 16, 2026 security incident: how we responded to a LiteSpeed zero-day attack

    Hostinger detected a zero‑day exploit in LiteSpeed Web Server on a Brazil server on Sep 16 2026, giving the attacker root access and compromising 399 accounts. The team isolated the server, coordinated with LiteSpeed to patch the vulnerability, rolled out the fix fleet‑wide, and restored affected sites from backups within the same day.

    Hostingerhostinger.com2 minpostmortem

  3. How we tracked down a 16-year-old SQLite bug

    Tailscale experienced 19 SQLite database corruptions over six months due to a 16‑year‑old bug in SQLite’s WAL checkpoint logic. The single‑writer, Go‑driven shard architecture forced them to add forensic telemetry, a transaction‑logging replay pipeline, and work directly with SQLite core developers to isolate and fix the issue, dramatically reducing downtime.

    Tailscaletailscale.com14 minpostmortemHN1223239

  4. Hackers Got Inside a Flock Camera

    Hackers removed a Flock license‑plate reader camera, copied its storage, extracted an on‑device encryption key, and released ~1.6 M images and logs covering 21 days of operation. Analysis shows the device captures ~28 images per vehicle, detects people, and stores raw media in unencrypted partitions. License‑plate detection runs on the cloud, and the camera’s software can mis‑identify graphics as…

    Hacker News front pagewired.com7 minpostmortemHN578267

  5. Laravel Scalpel Scans for Filesystem Intrusion Evidence

    Laravel Scalpel is a Laravel‑native scanner that looks for post‑deployment filesystem tampering – rogue PHP files, obfuscated backdoors, altered .htaccess/.user.ini, missing or mis‑configured .env, and diffs against a signed baseline. It ships with six built‑in scanners, baseline snapshot commands, fast vs strict hashing modes, CI‑friendly output (JSON, SARIF, GitHub annotations) and a ScanFinish…

    Laravellaravel-news.com5 min