On this podcast, we do have the news desk and links to the stories that were covered within the desk are included here.
Welcome to the security box, podcast 280. We’re going to need to do this in multiple parts, so podcast 280 will be here for quite awhile with the intermediates a through whatever to finish the series.
On this podcast, the Evolution of Cyber Security, part 3: Organized cybercrime and social engineering, part 4.
The podcast will cover Operation Aurora and it also talked about Stuxnet. Also, something called Duqu is also discussed.
Besides that, we have an AI segment talking about where we are now since the beginning discussions of podcast 267.
Nick Espinosa is back with Breaches of the Week, this time covering September 28 through October 4, 2026, and I’ve got a news desk as well.
This program is going to run 7 hrs, 10 mins and 53 seconds. Strap yourselves in, and enjoy the ride! I hope you enjoy the program.
The whole series will take you from late 2000 through 2013.
The News Desk
I know we’ve not had a lot in news coverage, I’ve been MIA, but we’re going to try and get the biggest items I can find including catching us up with Have I Been Pwned.
- Shiny Hunters specific news
- ShinyHunters hacker reportedly detained in Jordan, aiding FBI
- ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
- FBI tells ShinyHunters members to turn themselves in after recent arrest
- ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
- Dutch police confirm arrest in ShinyHunters hacking investigation
- Good news with arrests or convictions not related to Shiny Hunters
- Southern California therapist sentenced for secretly recording girls in bathroom
- Wearable tech company CEO found guilty of running $2 million Ponzi scheme
- San Bernardino County man arrested for alleged possession of child sexual abuse material
- Former US Air Force members sent to prison over BEC attacks
- Vietnamese man charged in $16 million ‘pig butchering’ crypto scam
- US soldier gets 70 months in prison for extorting 10 tech, telecom firms
- Custom ChatGPTs push ClickFix attacks to deploy RAT malware
- Over 16,000 Supabase databases expose PII, passwords, auth tokens
- Metamask discloses security incident affecting its infrastructure
- Open AI
- Hackers now exploit critical Roundcube flaw in code injection attacks
- Placeholder domain used in dev docs now serves ClickFix attacks
- Denmark population registry data breach affects 8.8 million people
- Frontline Education breach exposes school district employee data
- Warlock ransomware breach SharePoint in water, telecom operator attacks
HIBP Updates
We’ve not been on HIBP (Have I Been Pwned) in quite awhile. Here’s what we have since podcast 279’s news desk which was the last time we did a news desk.
Since we’ve been here, we’re now at 1,039 breaches consisting of 17.8 billion addresses.
Here’s what is new since we’ve talked last. Attributions are given if known. Other info including whether it is a sensitive breach will be given if known. Links to read more where applicable.
k = thousand, m = million, b = billion (5k, 6m, 2b as examples)
- Medela (423.9k) (sensitive breach) (Shiny Hunters) Read more about sensitive breaches
- LimeLeads (17.8M)
- Burger King Russia (3.2m)
- Chess.com (2026) (4.7m) (datascrape) Read More
- McKesson (6.4m) (Sensitive Breach) (Shiny Hunters) Read more about sensitive breaches
- Manchester Airports Group (8.8m) (FulcrumSec hacking group)
- Questel (1.2m) (Shiny Hunters)
- Carhartt (12.9m and synthetic data which was excluded) (Shiny Hunters)
- NIUS (6.1k) Sensitive Breach (leaked publicly)
- Golf Canada (569k) (possible exposure)
- Oz Hair and Beauty (2m) (xpl0itrs)
- Fanlore (144.5k) (unauthorized access and self reported to HIBP)
- Ring Central (1.6m) (initially covered on podcast 279, a Shiny Hunters attribution; put here as it was added to HIBP after we did the news desk for 279)
We hope you enjoy the program!
Discover more from Jared's Technology podcast network
Subscribe to get the latest posts sent to your email.