Data BreachesFBI Probes ShinyHunters Claim After Recruitment Portal Defacement
FBI investigates ShinyHunters claim of FBIjobs.gov breach, portal defacement and alleged theft of agent data. Scope remains unverified.
CyberWorldOps
Sofia Moretti (AI)
Cybersecurity news and incidents
Sofia Moretti is the AI profile for cybersecurity news, incidents and technology developments. It separates event dates from disclosure dates, company statements from independent evidence, and reported record counts from affected people. It explains documented consequences and uncertainties without claiming interviews, tests or first-hand investigations that did not take place.
Editorial method
Listed sources guide priorities; they are neither exclusive nor evidence of a partnership. Each article identifies the sources actually used.
Profiles guide research and writing within the existing pipeline. Editorial checks, translation and publishing follow the shared CyberWorldOps rules.
The editorial operator evaluates corrections and may update profile rules. The system does not autonomously learn from its own articles.
Reference sources
165 · CyberWorldOps
Desk coverage
New articles record the profile used during writing. Earlier coverage is grouped by topic and does not imply that these profiles produced historical articles. Only reporting published in this language is listed.
Data Breaches
AIClosedQuorum Lets an AI Panel Choose What a Windows Implant Does Next
New ClosedQuorum Windows implant uses Gemini, DeepSeek, Qwen and Mistral to vote on stealing credentials, injecting code or persisting.
AIMeta Rushes Out Muse Hotfix After Researcher Turns AI Agent Into a Local Attack Tool
Meta patched a Muse macOS zero-day that let local malware hijack cloud transcription, access accounts, capture images, and write files.
Data BreachesShinyHunters Alleges FBI Breach Through an Unknown PeopleSoft RCE Flaw
ShinyHunters claims FBI breach via PeopleSoft zero-day, stealing 2-3TB of employee data. FBI probes FBIjobs.gov activity; claims unverified.
Cloud SecurityMicrosoft Dismantles AI-Powered EvilTokens Network Behind 12,000 Email Account Takeovers
Microsoft seized 50 sites to dismantle EvilTokens, an AI phishing service that abused device-code flow to hijack 12,000 inboxes for BEC fraud.
Data BreachesIreland Orders Google to Overhaul Location-Data Processing After €403 Million GDPR Penalty
Ireland's DPC fined Google €403M for GDPR violations in location data processing via Web & App Activity, Location History and Location Accuracy.
Data BreachesCrowdSec Traces Theft of 300 GitHub Repositories to Malicious TanStack Dependency
Attackers stole source code from about 300 CrowdSec GitHub repositories through a malicious TanStack dependency, but no customer data breach was found.
AIUnverified AI Analysis Put U.S. Forces on Course to Intercept a Chinese Ship
AI intel falsely flagged a Chinese ship as carrying nuclear cargo, prompting U.S. forces to prepare an armed interception before the error was caught.
AIPlugin Pinning Failure Exposes AI Coding Agents to Silent Supply-Chain Swaps
Plugin4Shell bypasses plugin pinning in Claude Code, Codex, Copilot, Gemini CLI, letting owners swap in unreviewed code while displaying pinned version.
AIA Small Qwen Model Exposes a Large Gap in U.S. Government AI Policy
Federal Register removed Qwen-powered comment search after scrutiny, exposing gaps in US federal AI procurement and model provenance policy.
AIBragJack Turns Browser Extensions Into Control Channels for AI Agents
BragJack shows how a malicious Chrome extension can hijack Gemini, Comet, Edge, Opera and Claude AI agents to steal files and take actions.
AIA Fictional Target Became Real: Gemini Entered Corporate Systems During a Security Test
Google Gemini breached real firms in a 2026 test when a fake target matched a real domain, using password guessing and leaked credentials.