[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffkolcIvTDKSB3kuvGc3q3P4GV7yxfoix8Do7dlCgIzo":3},{"article":4,"iocs":51,"watch_terms":55,"solutions":56,"lesson":152},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"0f68f6b3-eb3d-4945-be6e-c782fa274a50","Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe","ransomware-response-expert-arrested-in-shinyhunters-fbi-hack-probe-c54aeb","The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference. The post Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe appeared first on SecurityWeek.","Canadian cybersecurity executive Edward Dubrovsky, specializing in ransomware response, has been arrested in the United States by the FBI. He is suspected of involvement in ShinyHunters attacks, including a recent breach of FBI systems that allegedly exposed information on nearly all agents and job applicants. The FBI attributed the intrusion to a contractor's failure to patch vulnerable Oracle PeopleSoft software.","Ransomware response expert Edward Dubrovsky arrested in US for alleged involvement in ShinyHunters attacks.","https:\u002F\u002Fwww.securityweek.com\u002Fransomware-response-expert-arrested-in-shinyhunters-fbi-hack-probe\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002Fcybercrime-hacker.jpeg","2026-10-12T10:32:05+00:00","2026-10-12T12:00:16.055268+00:00",8,[17,20,23,26,28],{"name":18,"type":19},"ShinyHunters","threat_actor",{"name":21,"type":22},"Oracle PeopleSoft","product",{"name":24,"type":25},"FBI","vendor",{"name":27,"type":22},"Cyber Extortion: Strategic Response",{"name":29,"type":25},"CyberSteward","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":30,"icon":32,"name":33,"slug":34},null,"Threat Intelligence","threat-intelligence",[36,41,46],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":42},{"id":43,"icon":32,"name":44,"slug":45},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":47},{"id":48,"icon":32,"name":49,"slug":50},"7d8b5ab8-ea0b-4ced-ae97-ec251b86993a","Ransomware","ransomware",[52],{"type":53,"value":18,"context":54},"malware","Extortion group and associated attacks",[24,29,21],{"controls":57,"vendors":145},[58,87,116],{"slug":59,"name":60,"problem":61,"products":62},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":88,"name":89,"problem":90,"products":91},"patch-management","Automated patch management","Known holes get closed in days, not months.",[92,100,108],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"slug":117,"name":118,"problem":119,"products":120},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[121,129,137],{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"securityscorecard","SecurityScorecard","\u002Fvendor-logos\u002Fsecurityscorecard.png","security-ratings","SecurityScorecard Ratings","https:\u002F\u002Fsecurityscorecard.com\u002Fsolutions\u002Fuse-cases\u002Fsecurity-ratings\u002F","Outside-in security ratings and monitoring of suppliers.",{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"bitsight","Bitsight","\u002Fvendor-logos\u002Fbitsight.png","bitsight-tprm","Bitsight Third-Party Risk Management","https:\u002F\u002Fwww.bitsight.com\u002Fproducts\u002Fthird-party-risk-management","Supplier assessments and continuous monitoring based on security ratings.",[146],{"slug":147,"name":148,"logo_path":149,"roles":150},"oracle","Oracle","\u002Fvendor-logos\u002Foracle.png",[151],"affected",{"slug":153,"title":154,"body":155,"framework_refs":156,"framework_notes":167},"unpatched-contractor-software-opens-fbi-systems-to-shinyhunters-breach","Unpatched Contractor Software Opens FBI Systems to ShinyHunters Breach","The breach of FBI systems was traced directly to a contractor's failure to patch vulnerable Oracle PeopleSoft software — a well-known, preventable attack vector. This incident underscores the compounding risk when third-party vendors with privileged access to sensitive government systems fail to maintain basic patch hygiene. The alleged involvement of a ransomware response professional further highlights that insider threats can originate from trusted cybersecurity partners, not just external adversaries. When contractors hold access to critical infrastructure, their security posture becomes part of your attack surface, making third-party risk management a mission-critical function.",[157,158,159,160,161,162,163,164,165,166],"CIS Control 7: Continuous Vulnerability Management","CIS Control 15: Service Provider Management","CIS Control 6: Access Control Management","NIST SP 800-161: Cybersecurity Supply Chain Risk Management","NIST SI-2: Flaw Remediation","NIST SA-9: External Information System Services","NIST AC-17: Remote Access","ISO 27001 A.15.1: Information Security in Supplier Relationships","CMMC Level 2: RM.2.141 (Vulnerability Remediation)","GDPR Article 28: Processor Obligations for Data Controllers",{}]