Supply-chain news — Is It Dead Yet?

Follow these headlines in your RSS/Atom reader. Included with Free; a verified account is required. Set up your feed → · Your profile →

Up to 50 matching topic groups, latest coverage first. Clear search

Recent headlines · 19

Last completed feed check: 2026-11-06T09:26:54.163Z.

2 sources could not be refreshed

Infostealers, CERT-FR. They will be retried on the next poll.

News topics ordered by latest coverage; first recorded report, key topic, publisher and linked coverage
Latest · UTC	First report	Key topic	Publisher
10-28 06:04	ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws ↗ShinyHunters · The Hacker News · 2026-10-28 06:04 UTC Details Article mentions: CVE-2026-35273 No unambiguous tracked-package match.	ShinyHunters	The Hacker News
10-19 13:48	Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site ↗ShinyHunters · Krebs on Security · 2026-10-19 13:48 UTC	ShinyHunters	Krebs on Security
10-12 21:26	Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe ↗ShinyHunters · SecurityWeek · 2026-10-12 21:26 UTC 2 more reports First recorded report: SecurityWeek · 2026-10-12T10:32:05.000Z Related coverage: ⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More ↗ The Hacker News · 2026-10-12 15:16 UTC ShinyHunters arrest number three: a Canadian ransomware negotiator ↗ Security Affairs · 2026-10-12 21:26 UTC No unambiguous tracked-package match.	ShinyHunters	SecurityWeek
10-12 02:54	Risky Bulletin: ShinyHunters suspects arrested in US and Jordan ↗Roundup · Risky Business News · 2026-10-12 02:54 UTC	Roundup	Risky Business News
10-09 17:21	What We Missed: FBI Strikes Back at ShinyHunters ↗ShinyHunters · Dark Reading · 2026-10-09 17:21 UTC	ShinyHunters	Dark Reading
10-07 13:48	ShinyHunters Extorted Boeing Spin-off Prior to Arrests ↗ShinyHunters · Krebs on Security · 2026-10-07 13:48 UTC Details Article mentions: CVE-2026-35273 No unambiguous tracked-package match.	ShinyHunters	Krebs on Security
10-07 10:03	FBI confirms 'multiple' arrests related to ShinyHunters hack ↗ShinyHunters · The Register Security · 2026-10-07 10:03 UTC 1 more reports First recorded report: The Register Security · 2026-10-05T17:46:22.000Z Related coverage: Another ShinyHunters suspect arrested ↗ Malwarebytes Labs · 2026-10-07 10:03 UTC No unambiguous tracked-package match.	ShinyHunters	The Register Security
09-29 07:30	24-Year-Old Arrested in Dutch Investigation Into ShinyHunters ↗ShinyHunters · Security Affairs · 2026-09-29 07:30 UTC	ShinyHunters	Security Affairs
09-28 19:30	ShinyHunters exploiting workarounds for Oracle PeopleSoft bug, Mandiant warns ↗ShinyHunters · The Record by Recorded Future · 2026-09-28 19:30 UTC	ShinyHunters	The Record by Recorded Future
09-28 14:47	ShinyHunters trades financial extortion for a reckless war of ego with the FBI ↗ShinyHunters · CyberScoop · 2026-09-28 14:47 UTC	ShinyHunters	CyberScoop
09-28 13:56	ShinyHunters tells The Reg: We hacked the FBI to 'protect our business' ↗ShinyHunters · The Register Security · 2026-09-28 13:56 UTC 2 more reports First recorded report: The Register Security · 2026-09-25T18:23:31.000Z Related coverage: ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw ↗ BleepingComputer · 2026-09-25 20:57 UTC FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day ↗ Help Net Security · 2026-09-28 13:56 UTC No unambiguous tracked-package match.	ShinyHunters	The Register Security
09-28 10:56	Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign ↗ShinyHunters · SecurityWeek · 2026-09-28 10:56 UTC	ShinyHunters	SecurityWeek
09-26 19:03	ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks ↗ShinyHunters · BleepingComputer · 2026-09-26 19:03 UTC	ShinyHunters	BleepingComputer
09-23 22:15	FBI Hack Exposed FBI’s Own Hacking Unit ↗Leaks & breaches · 404 Media · 2026-09-23 22:15 UTC	Leaks & breaches	404 Media
09-23 13:56	ShinyHunters claims FBI hack: 'This is NOT financially motivated' ↗ShinyHunters · The Register Security · 2026-09-23 13:56 UTC 5 more reports First recorded report: The Register Security · 2026-09-22T17:24:13.000Z Related coverage: ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach ↗ BleepingComputer · 2026-09-22 19:13 UTC ShinyHunters claims attack on FBI exposes almost all agents ↗ CyberScoop · 2026-09-22 23:47 UTC ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants ↗ The Hacker News · 2026-09-23 05:30 UTC ShinyHunters claims FBI breach was revenge for “false” report ↗ Malwarebytes Labs · 2026-09-23 12:03 UTC ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack ↗ Security Affairs · 2026-09-23 13:56 UTC No unambiguous tracked-package match.	ShinyHunters	The Register Security
09-21 14:00	ShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion payment ↗ShinyHunters · The Record by Recorded Future · 2026-09-21 14:00 UTC	ShinyHunters	The Record by Recorded Future
09-21 12:46	ShinyHunters hacks Clop leak site, threatens to extort ransomware gang ↗ShinyHunters · BleepingComputer · 2026-09-21 12:46 UTC 2 more reports First recorded report: BleepingComputer · 2026-09-19T13:48:32.000Z Related coverage: ShinyHunters hacks rival extortion gang and takes over its dark web site ↗ Malwarebytes Labs · 2026-09-21 10:17 UTC Clop gets a taste of its own medicine after ShinyHunters hijack leak site ↗ The Register Security · 2026-09-21 12:46 UTC No unambiguous tracked-package match.	ShinyHunters	BleepingComputer
09-10 13:13	ShinyHunters expose 6.4M in attack on medical supplier McKesson ↗ShinyHunters · The Register Security · 2026-09-10 13:13 UTC	ShinyHunters	The Register Security
09-03 19:42	What We Missed: Did ShinyHunters 'Breach' ReliaQuest? ↗ShinyHunters · Dark Reading · 2026-09-03 19:42 UTC	ShinyHunters	Dark Reading

Reviewed incident reports · 0

Last reviewed 2026-10-08. Selected historical incidents; a past compromise does not establish that a current release is compromised.

No reviewed stories match these filters. This does not mean no incidents have occurred.

About this feed and search

Search stored headlines, publishers, article mentions and matched package names, plus reviewed-report summaries. Full article bodies are not searchable. Coverage with the same specific topic is grouped within a 72-hour episode. Each row links to its earliest recorded report; later coverage is linked under Details. Roundups, generic platforms and separate campaign waves are not merged on a broad mention alone. Multiple reports are not independent corroboration. Ecosystem filtering uses package matches, so unmatched articles are excluded when you select an ecosystem.

Article mentions identify terms, not confirmed affected products or versions. Package links are automated leads, not confirmed vulnerability findings. Maintenance checks do not prove an affected version is safe.

Selected vulnerability advisories · 0

Sources and package mappings checked 2026-10-08. This is a manually reviewed selection of historical advisories, not a current exploitation ranking or complete CVE database. The news headlines above update separately.

An identity match is a reason to investigate, not confirmation that your installed release is vulnerable. Manifest checks do not establish runtime configuration or resolve every transitive dependency.

Vulnerability	Product / package relationship

No selected advisories match these filters. This is not a security clearance.

Runtime advisories on OpenCVE

Browse CVEs by vendor and product. Runtime CVEs do not automatically apply to every package in that ecosystem; verify affected versions and configurations.

News sources · 81 configured feeds

The news worker checks for due feeds one minute after each completed run. Individual feeds use one-, two- or ten-minute intervals; slow requests can delay a check. Clear tracked-package mentions trigger priority checks; they do not establish that an installed version is vulnerable. Sources without an RSS link and Feedspot’s directory are browsing resources. Reviewed reports above remain curated.

Security news and research

Recent headlines · 19

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws ↗ShinyHunters · The Hacker News · 2026-10-28 06:04 UTC

Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site ↗ShinyHunters · Krebs on Security · 2026-10-19 13:48 UTC

Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe ↗ShinyHunters · SecurityWeek · 2026-10-12 21:26 UTC

Risky Bulletin: ShinyHunters suspects arrested in US and Jordan ↗Roundup · Risky Business News · 2026-10-12 02:54 UTC

What We Missed: FBI Strikes Back at ShinyHunters ↗ShinyHunters · Dark Reading · 2026-10-09 17:21 UTC

ShinyHunters Extorted Boeing Spin-off Prior to Arrests ↗ShinyHunters · Krebs on Security · 2026-10-07 13:48 UTC

FBI confirms 'multiple' arrests related to ShinyHunters hack ↗ShinyHunters · The Register Security · 2026-10-07 10:03 UTC

24-Year-Old Arrested in Dutch Investigation Into ShinyHunters ↗ShinyHunters · Security Affairs · 2026-09-29 07:30 UTC

ShinyHunters exploiting workarounds for Oracle PeopleSoft bug, Mandiant warns ↗ShinyHunters · The Record by Recorded Future · 2026-09-28 19:30 UTC

ShinyHunters trades financial extortion for a reckless war of ego with the FBI ↗ShinyHunters · CyberScoop · 2026-09-28 14:47 UTC

ShinyHunters tells The Reg: We hacked the FBI to 'protect our business' ↗ShinyHunters · The Register Security · 2026-09-28 13:56 UTC

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign ↗ShinyHunters · SecurityWeek · 2026-09-28 10:56 UTC

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks ↗ShinyHunters · BleepingComputer · 2026-09-26 19:03 UTC

FBI Hack Exposed FBI’s Own Hacking Unit ↗Leaks & breaches · 404 Media · 2026-09-23 22:15 UTC

ShinyHunters claims FBI hack: 'This is NOT financially motivated' ↗ShinyHunters · The Register Security · 2026-09-23 13:56 UTC

ShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion payment ↗ShinyHunters · The Record by Recorded Future · 2026-09-21 14:00 UTC

ShinyHunters hacks Clop leak site, threatens to extort ransomware gang ↗ShinyHunters · BleepingComputer · 2026-09-21 12:46 UTC

ShinyHunters expose 6.4M in attack on medical supplier McKesson ↗ShinyHunters · The Register Security · 2026-09-10 13:13 UTC

What We Missed: Did ShinyHunters 'Breach' ReliaQuest? ↗ShinyHunters · Dark Reading · 2026-09-03 19:42 UTC