ShinyHunters PeopleSoft WAF Bypass, Arrests, And OpenAI Astra News
From Initial Access · 00:36:56
Show by Bishop Fox
In this episode, we break down four security stories: A ShinyHunters PeopleSoft WAF bypass that hinges on one URL-encoded character The arrest of an alleged ShinyHunters leader days before the group's FBI claim Nearly 400,000 DC Medicaid records left readable behind a public report OpenAI scrapping GPT-6.1 Astra over scope, authorization, and honesty We also cover Bishop Fox research on three practical risk questions: unauthenticated root RCE in Check Point management, Kubernetes namespace takeover in Zilliz Attu, and why an 85 percent jump in CVE disclosures does not automatically mean an 85 percent jump in real-world risk. Security Headlines: Google Warns of ShinyHunters' Fresh Oracle PeopleSoft Campaign, SecurityWeek Dutch police arrest suspected member of group that claimed FBI hack, BBC DC Health Agency Exposes 400,000 Beneficiary Records, SecurityWeek OpenAI scraps rollout of new AI model over safety concerns, BBC Also mentioned: Workshop: Weaponizing CloudFormation (available in English and Spanish) Events: SecureWorld Dallas 2026, VetsinTech NatSec + Space Innovation Summit 2026 Blog: One Port to Root: Weaponizing Check Point Management CVE-2026-93616 Blog: Zilliz / Attu | 2.6.5 Blog: Separating Signal from Slop: Triaging CVEs in the Age of AI Security Research Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit.
More episodes of Initial Access
More episodes
- Nvidia CEO Investigation, N-central Zero-Days, SonicWall MFA Bypass, And A Chainalysis Breach
- Binance $6.36B Hack, VMware ESX Zero-Day, TeamViewer Flaw, And Anthropic AI Exploits
- Direct Access with Farzan Karimi
- PHP2Shell Exploitation, Node2Shell Brotli RCE, And Mimori Ransomware Claims
- PHP2Shell: A Leaked Demo, A Broken Disclosure, and AI at Exploit Speed
- OpenAI Insider, Meta Muse’s Escape Hatch, AI Agents Gone Rogue
- A Third NetScaler Zero-Day, 8 Million Danish ID Records, and Google Pauses Its Bug Bounty
- Zero-Click Exchange RCE, $25 AI Intrusions, and the ShinyHunters FBI Claim
- Ten-Hour Breaches, MikroTik Backdoors, Router Takeovers & the NetScaler Root Cause
- Patch Tuesday Overload, Broken Threat Feeds & the Scoping Problem
PodSearch is a free, independent podcast search engine. Read about PodSearch, the privacy policy or contact us.