💥 BREACHES & INCIDENTS
- Suspected ShinyHunters member detained in Jordan, reportedly helping FBI identify fellow hackers
A suspected ShinyHunters member has been detained in Jordan and is reportedly cooperating with the FBI to identify other group members.- Suspected ShinyHunters member Saif al-Din Khader, allegedly known online as 'Rey,' was taken into custody by Jordanian authorities on September 29, per Reuters sources.
- He is reportedly helping the FBI and international law enforcement locate other members of the data theft and extortion group.
- The detention follows ShinyHunters' claim it breached the FBI jobs portal (apply.fbijobs.gov) via an undisclosed Oracle PeopleSoft flaw, pivoted to AWS GovCloud, and stole 2-3 TB of employee data; Oracle, AWS, and the FBI have not confirmed that attack path.
- The group allegedly supplied a sample of 5,000 employee records with names, addresses, SSNs, and family details; Reuters partially matched at least 10 cases.
- It follows the September 15 Dutch arrest of an alleged ShinyHunters leader; the group has allegedly breached 140+ organizations and extorted at least $70 million.
Sources 📄 Source: usnews.com · 📎 Coverage: reuters.com · 👁 via Cyber Security News, cryptika.com (discovered)
🔓 CVEs & KEV
CVE-2026-96451 — Ultimate Member — CVSS 8.8 — WordPress Ultimate Member plugin through 2.13.1 - Privilege Escalation vulnerabili...
CVE-2026-103065 — Themeum Kirki — CVSS 8.2 — WordPress Kirki plugin through 6.3.1 - Arbitrary Code Execution vulnerabilityImpro...
📋 ADVISORIES
- 📄 Source for Unlimited Elements For Elementor plugin vulnerable to reflected XSS (CVE-2026-103342, CVSS 7.1) — patchstack.com