Defending SaaS-based applications against ShinyHunters OAuth abuse
Abuse of OAuth trust relationships to gain unauthorized access to Salesforce tenants.
Threat Intel
-
-
Match Group Data Breach: ShinyHunters Claim 10M [2026]
A data breach resulting in the theft of up to 10 million user records from several dating platforms.
-
Mystery deepens over data breach of inmate info
Leak of inmate and contact PII by a threat group.
-
PRIVACY ALERT: Blank Rome LLP Under Investigation for Data Breach
Data breach caused by social engineering.
-
Blank Rome Data Breach Exposes SSNs; Attorneys Investigating
Data breach via social engineering and unauthorized file upload to a third-party cloud storage account.
-
Meridian Health Plan of Illinois Data Breach Affects 21K
Unauthorized access to a provider portal led to the exposure of member data.
-
U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support
Sanctioning and dismantlement of ransomware-enabling infrastructure and identification of state-sponsored cyber operations.
-
148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet
Malicious npm packages were used to host proxy sites that enrolled visitors into a DDoS botnet.
-
Microsoft Maps Year-Long ShinyHunters-Linked Salesforce Data Theft Across Three Paths
Year-long campaign of data theft from Salesforce environments using OAuth abuse and vishing.
-
Centers Laboratory Archives
Extortion group WorldLeaks stole 720 GB of data from Centers Laboratory.