Google Threat Intelligence Group

vulnerability

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws

A zero-day vulnerability in Oracle PeopleSoft, exploited by the ShinyHunters group since May, has been revealed to involve three chained flaws. Mandiant reported a subsequent, larger wave of attacks targeting various sec…

The Hacker News · 3h ago CriticalCVSS 9.8KEVEPSS 97%

CVE-2026-35273 zero-day ssrf trust-bypass

threat-intel

Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

A massive dump of stolen infostealer logs, containing 5,871 infected machines across 162 countries, has exposed a wealth of AI-related credentials and API keys. The data includes session tokens, JWTs, and JWEs for servic…

The Hacker News · Sep 9, 2026 High

ai credentials api keys

threat-intel

Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution

A Brazil-based cybercrime group, known as Slim Spider, has been linked to a multi-stage intrusion campaign targeting Brazilian financial institutions since March 2026. The group leverages sophisticated cloud attack techn…

The Hacker News · Sep 8, 2026 High

BR NI PA cloud credential theft brasil

All articles

news.mlab.sh

Google Threat Intelligence Group

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws

Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution