ShinyHunters' FBI Claim, VeloCloud CVSS 10.0 & WaterPlum

On September 22, the extortion group ShinyHunters claimed it broke into the FBI itself — stealing what it says is 2 to 3 terabytes of data on agents and job applicants through a previously unknown, unpatched flaw in Oracle PeopleSoft, and defacing the bureau’s jobs portal to make the point. The FBI’s response escalated over the following two days, from a boilerplate “aware of claims” statement to a Wednesday acknowledgment that it’s “actively and aggressively investigating,” and Reuters independently confirmed that at least some of the leaked sample data — including a match on FBI Director Kas