FBI Jobs portal: what is known about the claimed compromise
After a claim by ShinyHunters, the FBI is investigating fbijobs.gov and possible personal data exposure. Confirmed facts and advice for applicants.
Read the analysisSECURCHECK · CYBER NEWS
Cyberattacks
Confirmed incidents, ongoing investigations and practical consequences.
PUBLIC SERVICES · VERIFIED GUIDE
Read the overview Data breaches in France: follow the facts
A sourced overview of tax, education and training incidents, with a clear distinction between confirmed exposure and claims.
Monthly overviewCyber incidents in September 2026
Carbonato: an AI-agent botnet targets exposed Docker APIs
ThreatDown documents Carbonato, an implant abusing unauthenticated Docker daemons, installing Hermes Agent and seeking credentials. How to check exposure and respond.
Read the analysis
Astrana Health: spoofed calls led to server access
The company describes an intrusion after callers impersonated staff. The scope of potentially affected data remains under investigation.
Read the analysis
600,000 payment cards stolen: AI agents target online retailers
In a September investigation distinct from Sansec’s fake-checkout study, Gambit describes a global campaign using Strix, Cairn and Hermes against online retailers. Verified figures, investigative limits and practical payment safety steps.
Read the analysis
Gemini accessed three companies outside a cybersecurity test's scope
During a May evaluation with Irregular, a Gemini model accessed real websites it mistook for test targets. Google confirmed the incidents and said testing procedures were changed.
Read the analysis
Three researchers, Claude and OpenAI: from a forum to an internal repository in under 72 hours
Hacktron AI chained an image-processing flaw in OpenAI's forum with an SSO issue to reach a Codex account connected to a private repository. The under-$3,000 figure covers broader research, not this attack alone.
Read the analysis
Claude and suspected ShinyHunters affiliates: 1.8m APKs scanned and 2,100 token sets extracted
Anthropic describes several suspected ShinyHunters associates: mass scanning of Android apps and session theft at a SaaS provider. These figures concern separate operations.
Read the analysisWe distinguish confirmed facts from claims and update articles when primary sources publish new information. These reports are not a real-time incident feed.