FBI confirms multiple arrests in its ShinyHunters hack probe

The FBI says it's arrested "multiple" people in its investigation into the ShinyHunters hack of its jobs website. The bureau confirmed the arrests to The Register on Monday 5 October, US time. A day later, it said the break-in came down to a security patch an outside contractor never installed. That contractor's now gone.

Continue the story · 5 min read+ Follow Hacking

1. Hacking·5 Oct·5 min read

   CISA adds Apple CoreGraphics flaw CVE-2026-86950 to KEV list

   CISA added Apple's CoreGraphics bug CVE-2026-86950 to its KEV list on 29 September. US agencies had to patch by 2 October. iOS and macOS fixes are out.
2. Hacking·4 Oct·6 min read

   CISA KEV catalogue explained: the list of bugs under attack

   CISA's Known Exploited Vulnerabilities catalogue listed 1,731 bugs attackers are already using as of 1 October 2026. Here's how it works and what changed.
3. Hacking·3 Oct·5 min read

   Police seized KillSec's leak site and say a 16-year-old ran it

   Police in 10 countries seized the KillSec ransomware leak site and five servers on Wednesday 30 September. They suspect a 16-year-old was the leader.
5. Hacking·3 Oct·5 min read

   Iranian named as Mabna suspect Amir Barati extradited to the US

   Montenegro extradited a 40-year-old Iranian to the US. Police gave only initials, but reports name him as Amir Barati, accused in Mabna's campus hacks.
6. Hacking·3 Oct·5 min read

   Chrome 154 fixed 11 security bugs, one a critical WebGL flaw

   Google's Chrome 154 update, version 154.0.8037.97, landed on Thursday 1 October with 11 security fixes. One is critical, and none is flagged as exploited.
7. Hacking·3 Oct·5 min read

   GitLab fixed a critical AI Gateway flaw, its own servers first

   GitLab fixed critical AI Gateway flaw CVE-2026-90970 on Friday 2 October. Self-hosters need 19.2.4, 19.3.2 or 19.4.1. GitLab.com users are covered.
8. Hacking·3 Oct·5 min read

   DHH's Omarchy Linux put US$100,000 into a HackerOne bug bounty

   Omarchy, DHH's Linux distribution, opened a US$100,000 bug bounty on HackerOne on Friday 2 October, Adelaide time. Critical bugs pay up to US$1,500.
9. Hacking·29 Sept·18 min read

   NetScaler got hit before the fix

   Hackers are already using two new flaws to break into Citrix NetScaler boxes. US federal agencies have until Wednesday 30 September to fix them.
10. Hacking·17 Sept·16 min read

    Cisco Secure Email Gateway flaw is under attack

    Cisco Secure Email Gateway has a critical flaw, CVE-2026-76461, that lets hackers take it over. It's under attack and CISA set a 17 September deadline.
11. Hacking·13 Sept·6 min read

    Apple Patched the Neural Engine

    Apple has patched CVE-2026-43748, a critical bug in its Neural Engine driver, in macOS Sequoia 15.7.8, Tahoe 26.6 and matching iOS updates.
12. Hacking·12 Sept·6 min read

    CISA directive BOD 26-04 sets three-day patch clocks

    CISA's new directive for federal agencies, BOD 26-04, sets patch deadlines by risk. The most urgent flaws get about three days, plus forensic checks.
13. Hacking·10 Sept·6 min read

    Chromium Hit the KEV

    The US cyber agency CISA has added Chromium flaw CVE-2026-85046 to its Known Exploited Vulnerabilities catalog. Browser updates carry the fix.
14. Hacking·7 Sept·17 min read

    Magento zero-day StyleSmuggler hit stores before Adobe's fix

    Sansec says a Magento and Adobe Commerce zero-day it calls StyleSmuggler was under attack from 4 September. Adobe issued an emergency fix on 7 September.
15. Hacking·6 Sept·5 min read

    Microsoft says Entra ID flaw CVE-2026-62916 is already mitigated

    Microsoft says Entra ID flaw CVE-2026-62916, an elevation of privilege bug, is already fully mitigated. Customers don't need to do anything.
16. Hacking·6 Sept·5 min read

    CISA adds seven exploited flaws, including LiteLLM, to KEV

    CISA added seven actively exploited flaws to its catalog on 2 September, including bugs in LiteLLM and JFrog Artifactory and two in SonicWall SMA1000.
17. Hacking·2 Sept·5 min read

    The KEV named SharePoint

    CISA added the SharePoint flaw CVE-2026-55040 to its Known Exploited Vulnerabilities catalog on 18 August. Microsoft's July updates already fix it.
18. Hacking·31 Aug·5 min read

    Microsoft named TerminalFix

    Microsoft's 28 August Threat Intelligence post names TerminalFix, a ClickFix variant that sends the paste to Windows Terminal or PowerShell.
19. Hacking·30 Aug·4 min read

    PaperCut shipped Emergency Patch Release 2 for NG and MF

    PaperCut warned on 27 August AEST that attackers were exploiting NG and MF, then shipped Emergency Patch Release 2 on 28 August. Two CVEs are listed.
20. Hacking·30 Aug·5 min read

    CISA named the week’s exploited bugs and put due dates on the cards

    26 and 27 August adds to the KEV catalog. NetScaler and SQL Server were due 29 August. A kernel row is due today. The list stays. The how-to does not.

Say hello in our guest book