government hack situation is absolutely insane
Source: YouTube · Low Level · published Sep 24, 2026 · 15:04
BLUF: The Shiny Hunters ransomware group recently hacked the FBI's applicant portal, citing grievances with the bureau's cybersecurity advice, which highlights the critical need for real-time secure coding practices in the age of AI-generated software. 0:11
Key Takeaways:
• The Shiny Hunters, a sophisticated extortion group active since 2020, breached apply.fbijobs.gov, claiming to have compromised sensitive PII and PHI of current and former FBI employees 0:11.
• This group has a history of targeting major organizations including Microsoft, AT&T, Google, and educational platforms like Canvas, often using social engineering to steal SSO tokens 1:01.
• The FBI had previously warned the public about Shiny Hunters after their extensive Canvas hack earlier in the year, advising users to be vigilant against phishing and social engineering 2:19.
• Shiny Hunters published a PSA responding to the FBI's advice, motivated by notoriety and disagreement with the bureau's security recommendations, illustrating the complex motivations of modern threat actors 4:45.
• To combat these threats, tools like Legit Vibe Guard are emerging to integrate security checks directly into the developer's IDE, preventing vulnerabilities like SQL injections before code is committed 3:18.
• Visiting dark web sites requires extreme caution; while Tor anonymizes traffic, browsers like Brave still use Chromium/V8 engines which are susceptible to exploits that can compromise the user's device 5:00.
Closing Statement: The FBI hack serves as a stark reminder that even the most secure agencies are vulnerable to social engineering and sophisticated ransomware groups. It underscores the urgent importance of shifting security left, ensuring code is secure at the point of creation rather than after deployment.
Sources:
- 0:11 Introduction of the Shiny Hunters hack against the FBI jobs page.
- 1:01 Overview of Shiny Hunters' history and target list.
- 2:19 FBI's prior warning regarding the Canvas hack.
- 3:18 Explanation of Legit Vibe Guard's real-time security features.
- 4:45 Discussion on hacker motivations and the FBI PSA.
- 5:00 Warnings about security risks when accessing the dark web.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
If you've been on the internet recently, you've probably seen the news. The FBI was hacked. What makes this interesting though is that the reason for the hack and how they got in was a little different than usual. It all started when I was doom scrolling on Twitter right over here. VX-Underground posted Shiny Hunters adjust to face the FBI jobs page. Now, honestly, I was in shock. I could not believe it. So, you click into this picture, you will see very clearly, yep, apply.fbijobs.gov. And at the bottom it says, "All FBI data was compromised including sensitive PII, PHI on incumbent and former FBI employees, and all applicant information. We have a lot more than we claim here. Thank you for your attention to this matter. Shiny Hunters." Now, who are the Shiny Hunters? Who Who is this thre…