Signal//Noise #036 - Everything Shiny is not Gold. Ask the FBI!

Signal//Noise #036 - Everything Shiny is not Gold. Ask the FBI! Hackers broke into the FBI's job portal, exposed its secret hacking unit, and demanded a retraction instead of a ransom. EPISODE OVERVIEW The extortion crew ShinyHunters claims it breached the FBI through the Oracle PeopleSoft software behind FBIjobs.gov and stole personnel data on current, former, and prospective employees. Inside the stolen sample, journalists found members of the FBI's Remote Operations Unit, the team that builds the bureau's own hacking tools. Chris Loehr and Bob Miller separate what the FBI confirmed from what the attacker only claimed, and they run the whole incident through five AI tools (Claude, ChatGPT, Perplexity, Grok, and Gemini) to compare the analysis live on air. WHAT WE COVER \- How a public recruiting portal became the claimed door into federal personnel data \- Why the "brand new zero-day" is almost certainly the known flaw CVE-2026-35273, bypassed with one encoded character \- The firewall-bypass trick that beat compensating controls on unpatched PeopleSoft servers \- Why exposing the Remote Operations Unit is a counterintelligence problem, not a routine data breach \- The real campaign indicators defenders can hunt for, and why they are not FBI-attributed \- A non-financial extortion demand, and why paying is not the off-ramp \- Where the five AI engines agreed, and the one that invented an attack step out of thin air KEY TAKEAWAYS \- A WAF rule you can beat with one encoded character is not a patch \- Confirmed facts in this incident are narrower than the headlines claim \- Recruiting and HR systems are production attack surface, not back-office tooling \- Cross-checking multiple AI analyses catches fabrications that a single tool hands you with confidence ABOUT THE SHOW Signal // Noise is a cybersecurity podcast where Chris Loehr and Bob Miller break down the latest security incidents, threats, and trends. Each episode runs the same incident through five leading AI analysis tools (Claude, ChatGPT, Perplexity, Grok, and Gemini) then compares results live on air. Subscribe for weekly analysis that helps security professionals and business leaders stay ahead of emerging threats. RESOURCES \- Original article: https://www.404media.co/fbi-hack-exposed-fbis-own-hacking-unit-remote-operations-shinyhunters/ \- Google / Mandiant on the PeopleSoft campaign: https://cloud.google.com/blog/topics/threat-intelligence/shinyhunters-renewed-mass-exploitation-campaign-targeting-oracle-peoplesoft \- Oracle advisory: CVE-2026-35273 (out-of-band Security Alert, June 10, 2026) TAGS FBI hack, ShinyHunters, UNC6240, Oracle PeopleSoft, CVE-2026-35273, PSEMHUB, WAF bypass, FBIjobs.gov, Remote Operations Unit, data breach, cyber extortion, threat intelligence, cybersecurity, incident response, SIDEEYE, AI analysis, CISO, Signal Noise, counterintelligence, PeopleSoft RCE