PeopleSoft

Shiny Hunters claims it breached the FBI using an Oracle PeopleSoft zero day and stole terabytes of agent data from AWS GovCloud.

A Check Point Management Server zero day is under active exploitation.

Chinese hackers are exploiting a Zyxel switch flaw, and the researchers behind months of Microsoft Defender exploits has revealed his true identity, and we talk about it here today on the show.

And the lead's a big one, by the way.

Shiny Hunter is claiming it hacked the FBI itself using a zero day that Oracle has not yet confirmed even exists, and they're publishing agent data that independent reports have partially verified.

Whether the full scope holds up or not, the implications for every PeopleSoft operator are immediate.

We're gonna get into all of that and more, so let's do that.

But before we do, I've got my double espresso this morning.

The group also defaced the FBI Jobs website with a message claiming that it had been ceased.

The hackers say that they exploited a previously unknown vulnerability in Oracle PeopleSoft and claim that they have access to AWS GovCloud system and took it as much as two to three terabytes of data.

Those broader claims have not been independently confirmed by FBI.

The Bureau says that it's aware of unauthorized activity involving fbijobs.gov and is investigating.

404 Media verified parts of the sample by matching phone numbers to names and Justice Department personnel listings.

The hackers say they exploited a zero-day vulnerability in the FBI's Oracle PeopleSoft system, then accessed government cloud servers taking two to three terabytes of data.

The method remains unconfirmed.

But the FBI says it's investigating activity affecting its jobs website as well.

They spoke-

That it was specifically a PeopleSoft

...

they spoke to members of ShinyHunters directly.

Uh, I think from what I read that there was a patch or something available earlier this year, or the vulnerability was, was announced earlier this year, and I think we might have even talked about this one.

Um, and then the patch became available like June 10th or something like that, and it hasn't, does not appear that it was in place.

So the, the, Shiny's own words claim that this, uh, per, per Joseph's reporting, claim this is a zero-day in PeopleSoft, to which I would be like...

I would have said water is wet, but I'm not going down that road again.

And the idea is to treat many more pets whose owners simply cannot afford the care.

By the way, Dave Duffield built companies including PeopleSoft.

And we'll all recognize this here in the building.

He built Workday.

And then quickly, I really learned I love the technical aspects of sales.

So right away, a PeopleSoft, which before they were acquired by Oracle, I was a sales engineer.

And really, I was a young guy.

I was 23 to 25.

It's one of my favorite jobs I've ever had.

And PeopleSoft was an amazing place.

Got very lucky that I got a job there because they had classical training, classical sales training.

So SEs, you didn't just learn where to click.

So we had to go out and search.

So we looked at the incumbent, and then we looked at other products, like the PeopleSoft, SAP, Oracle.

And we looked at Lawson.

We ended up choosing Lawson.

The Dave and Cheryl Duffield Foundation announced the Duffield Big Bet for Pets, which is a $250 million grant over the next five years for nonprofit community veterinary care.

Dave Duffield was the founder of PeopleSoft and Workday, and it's the same foundation behind Maddie's Fund, which is the largest private foundation for companion animals.

Overall, the Duffield Big Bet for Pets is targeting about 50 million dogs and cats without adequate veterinary care, mostly for financial reasons.

The two grants are live right now.