CyBUr Smart Morning News Update - September 28, 2026

sick and feverish, was shiny hunters targeting the FBI's job portal.

So when it says shiny hunters hack the FBI, let's keep in mind what we're talking about here, right? Because obviously this gets misreported or misstated.

They did not hack the FBI's website or the FBI's internal system.

The FBI has several internal systems across unclassified to top secret networks, which are which can only be accessed from within an FBI facility.

So they're protected by multiple layers of encryption.

It's almost impossible to hack into.

Not saying it's necessarily, nothing's impossible, but it makes it very difficult.

What shiny hunters did here was they were able to compromise the FBI jobs portal, which is hosted by a third-party entity.

Now, how that's configured, I do not know.

It would be interesting to know from a postmortem that this website is hosted on this particular provider.

Here's the things they had in place.

And it appears to be an Oracle vulnerability that was not patched, which should have been patched because the patch had been out, but it was not patched.

So certainly human error, the issue here, of course.

And so they were able to get in.

And then the odd thing is they're claiming to have all this information about... about FBI employees, their names, where they work.

And some of this has been verified.

At least 5,000 people have been verified.

And I'm curious as to why the FBI keeps that information on that site.

I don't know.

That would be something for the FBI to report to.

Hopefully they will at some point, but they have not yet, obviously.

nor will I probably ever.

But it's interesting that this happened because, and there's plenty of news articles.

I'm not going to list this.

I'm looking at a register article here, but I'm not even going to read it because you've heard about it already.