Show Notes
ShinyHunters claims it stole 2-3 TB of FBI data and shared a sample with researchers containing information on employees, applicants, and even family members.
The FBI has acknowledged unauthorized activity affecting FBIjobs.gov but has not commented on the broader allegations.
A defaced FBI jobs site. Thousands of alleged employee records. A public ultimatum to the FBI to retract statements made in its May threat advisory.
Join Matt and David as they unpack one of the boldest cybercrime stories of the year, along with ShinyHunters' apparent takeover of Cl0p's leak site, and an AI security test that targeted a real organization.
More from State of Cybercrime
If your company runs PTC Windchill, Cl0p may already have your blueprints.
A complete attack chain run by an AI agent – with zero human hands on the keyboard.
The supply chain remains the weakest link. A new automated malware campaign dubbed “Megalodon” poisoned more than 5,500 GitHub repos in just six hours, quietly harvesting cloud credentials, tokens, and sensitive code from environments that implicitly trust what they pull.
275 million users across 9,000 institutions. The #shinyhunters breach of Instructure – the company behind the widely used Canvas LMS – has allegedly exposed 3.6TB of data, making it one of the largest education-sector breaches in history.