A hacking group calling itself ShinyHunters defaced the FBI's jobs recruitment website and claims to possess home addresses of FBI agents. The group has demanded that the bureau retract a warning it issued in May about ShinyHunters, giving the FBI a one-week deadline.
gizmodo.com
· 2026-09-23
Hacking group ShinyHunters says it breached FBI systems and stole personal data on thousands of agents and job applicants, including names, home addresses and phone numbers. 404 Media reported the group first breached an Oracle PeopleSoft HR server before pivoting into an Amazon-hosted government cloud, and the FBI's job application portals appeared defaced and offline. ShinyHunters says the hack is not financially motivated and is demanding the FBI remove a report containing what it calls false allegations about the group.
techcrunch.com
· 2026-09-22
Hacking group ShinyHunters told 404 Media it breached FBI-related systems and obtained personal data on all FBI employees and applicants, including names, home addresses, phone numbers, birthdates and spouse details. The group provided a sample of roughly 5,000 records, and 404 Media verified some phone numbers matched named individuals and linked others to Justice Department personnel. ShinyHunters also defaced the FBI's jobs website on Tuesday.
404media.co
· 2026-09-22
The ShinyHunters extortion group told BleepingComputer it exploited a new remote-code-execution flaw in Oracle PeopleSoft to access FBI systems and move into FBI-managed AWS GovCloud infrastructure, claiming theft of 2-3TB of data including employee, applicant, HR and Medlink records. The group shared a screenshot showing the FBI Jobs site defaced with its logo and a message asserting sensitive PII/PHI had been stolen, and said the FBI quickly took the affected systems offline.
bleepingcomputer.com
· 2026-09-22
The FBI published CJIS Security Policy version 6.1 on June 25, 2026, refining the modernized control-based framework introduced in v6.0 last December. The update raises required encryption key strength from 128-bit to 256-bit for CJI both in transit and at rest, and increases mandatory vulnerability scanning frequency from quarterly to monthly.
bleepingcomputer.com
· 2026-09-21
FBI Director Kash Patel told Fox News that AI usage at the bureau has risen 605% since he took office, crediting the technology with helping thwart a school shooting in North Carolina and several other states. He also said major tech companies are 'embedded' within the FBI, though no official figures confirm the specific percentage he cited.
tomshardware.com
· 2026-09-20
An FBI memo reportedly advised ICE officers to be cautious of women on dating apps, including those presenting as "tradwives," whose profiles seem tailored to appeal to them. The warning suggests such profiles could be used to identify, track, or expose agents' identities.
gizmodo.com
· 2026-09-18
US officials removed a Chinese-made Qwen AI search tool from the Federal Register website on Wednesday after social media users spotted it powering search of public regulatory comments. The tool, made by Alibaba, had been live for at least a day before removal, and neither the National Archives, the White House, nor the FBI has explained how or why it was deployed.
arstechnica.com
· 2026-09-18
Cybersecurity teams from the FBI and U.S. Coast Guard boarded two U.S.-bound oil tankers in the Gulf of Mexico between August 21-24 after discovering their networks had been compromised, giving attackers apparent control over navigation, propulsion, and cargo systems. One vessel was identified as VL Prosperity, a massive oil tanker that reportedly lost communications for over a day and experienced interference with its speed and fuel systems while sailing from Egypt to the U.S. in early August.
techcrunch.com
· 2026-09-18
The FBI seized the two domains operating NightmareStresser, a DDoS-for-hire platform that had over 566,000 registered users and dozens of servers capable of launching attacks up to 200 Gbps. The takedown was carried out under Operation PowerOFF, an international law enforcement effort targeting DDoS-as-a-service infrastructure.
bleepingcomputer.com
· 2026-09-17
Two child sex abuse survivors have filed a proposed class action against Jeffrey Epstein's estate, alleging the Justice Department failed to notify dozens of victims whose images were found among Epstein's massive cache of child sexual abuse material. The FBI reportedly reviewed tens of thousands of videos after Epstein's arrest and confirmed a large volume of images depicted likely minors, some unrelated to Epstein's known trafficking ring. The lawsuit targets the estate's co-executors, seeking court-ordered notification and remedies for survivors who may never have met Epstein but whose abuse images he possessed.
arstechnica.com
· 2026-09-16
During a Senate Judiciary Committee hearing, FBI Director Kash Patel defended a policy change made earlier this year that no longer automatically disqualifies applicants with a history of bestiality or animal cruelty if the conduct occurred before age 18. Patel argued the change protects people who were 'victims' of forced bestiality, while lawmakers including Senators Durbin and Kennedy pressed him on the confusing and controversial framing of the rule.
wired.com
· 2026-09-15