AWS threat report

ShinyHunters threat group exploited a zero-day vulnerability in Oracle PeopleSoft to compromise the FBI jobs website and gain access to AWS GovCloud instances, exfiltrating approximately 2 TB of employee data. The group threatens to release the data including information on FBI employees and their family members unless the FBI retracts previous statements about their activities. This represents active exploitation of a critical vulnerability affecting US government infrastructure.

• This Week In Security: FBI Gets Hacked, Muse Vulnerable To Click(opens in a new tab)
• ShinyHunters Bypasses PeopleSoft WAF in Renewed Exploitation(opens in a new tab)