cyber.hendryadrian.com
YouTube · Hak5

Threat Wire Covers Shiny Hunters’ FBI Claim and Major Software Vulnerabilities

· 7:04 · Watch on YouTube ↗

Summary

Threat Wire reports Shiny Hunters’ claim of more than 2 TB of FBI-related data, continued Oracle PeopleSoft exploitation, and vulnerabilities affecting OpenAI, GitLab, Nintendo Switch, Parallels Desktop and Cloudflare Containers.

Key points

  • Shiny Hunters claimed to hold more than 2 TB of FBI employee and applicant data. Mandiant reportedly said the group continued exploiting an Oracle PeopleSoft vulnerability after a patch was released.
  • The report says the PeopleSoft vulnerability was used to access fbijobs[.]gov and FBI-managed servers on AWS GovCloud; these access claims are attributed to the report and group.
  • Hacktron researchers used Claude to identify a version discrepancy involving libheif and ImageMagick, demonstrate remote code execution on an OpenAI community forum service, and take over employee accounts through a separate OpenAI SSO misconfiguration.
  • The FBI took control of Nightmare Stresser, described as a DDoS-for-hire service.
  • Researchers reported that spoofing private email addresses in GitLab could enable code pushes, CI/CD job execution and bypassing restrictions on private products.
  • The report describes Nintendo Switch and Parallels Desktop vulnerabilities that could enable unauthorized code execution or access to stored information, and privilege escalation, respectively.
  • Cloudflare validated a Cloudflare Containers data-exposure issue caused by unzeroed storage blocks, removed the relevant configuration flag, and reported no evidence of exploitation in the wild.

Article Details

Topics
  • [00:12] Hacktron’s ImageMagick and libheif vulnerability research involving OpenAI
  • [01:33] FBI action against Nightmare Stresser and Shiny Hunters’ data claim
  • [02:12] Reported Shiny Hunters exploitation of an Oracle PeopleSoft vulnerability
  • [04:09] Nintendo Switch and Parallels Desktop vulnerabilities
  • [04:39] AI-related vulnerability findings and Meta’s Muse assistant
  • [05:12] Cloudflare Containers data exposure and remediation
  • GitLab email-spoofing vulnerability and potential code execution

MITRE ATT&CK

T1190 · Exploit Public-Facing ApplicationShiny Hunters reportedly exploited an Oracle PeopleSoft vulnerability to gain access to FBI-related systems; the transcript attributes the exploitation reporting to Mandiant.

Threat Actors

Shiny HuntersThe group claimed to have compromised the FBI and hold sensitive information on employees and applicants. The transcript says Mandiant reported continued exploitation of an Oracle PeopleSoft vulnerability; the group’s claims and reported access are not independently confirmed in the transcript.

Vendors

Canonical[04:43] Canonical has upped the release cadenceCloudflare[05:14] Cloudflare containers, enabling readingGitLab[03:37] good business." Besides news, GitLabMeta[00:17] [music] Meta, and more. Remember thatNintendo[04:09] Nintendo disclosed a vulnerability aboutOpenAI[00:15] access to major parts of OpenAI, Slack,Oracle[02:26] Oracle PeopleSoft product, according toParallels[04:26] A vulnerability in the Mac Parallels

Products

Claude[01:03] Hacktron team used Claude to find theCloudflare Containers[05:14] Cloudflare containers, enabling readingGitLab[03:37] good business." Besides news, GitLabImageMagick[00:34] out ImageMagick. [music] And quitelibheif[00:46] libheif, which was being used by aMuse[05:03] released an AI assistant called Muse,Nintendo Switch[04:10] the Nintendo Switch original and theOracle PeopleSoft[02:26] Oracle PeopleSoft product, according toUbuntu[04:46] for Ubuntu to every 2 weeks. OpenAI has

Industries

Government[05:01] government Medicare website. Meta

Related Articles