Precursor Intelligence
Threat News
Latest cyber threat intelligence, breaches and exploitation
3 matching stories
ShinyHuntersShinyHunters Bypasses MFA With Salesforce OAuth Playbook
Cato Networks publishes a 2026 threat-actor profile for ShinyHunters, detailing its MFA-bypass playbook (help-desk vishing + malicious Salesforce connected app + OAuth token) and the UNC6040 campaign that targets Salesforce, Salesloft Drift, and Gainsight integrations.
ShinyHunters Exploits Oracle PeopleSoft Zero-Day to Breach University of Nottingham and Disrupt Mackay Sugar
Threat actor ShinyHunters leveraged a zero-day vulnerability in Oracle PeopleSoft to compromise high-profile targets including the University of Nottingham and Mackay Sugar, enabling data theft and operational disruption.
Trezor Confirms Data Breach at ShipMonk Affecting 14,000 Customers
Trezor has confirmed that its third-party shipping partner, ShipMonk, suffered a data breach impacting 14,000 customers after attackers leveraged a SQL injection flaw in the Metabase platform.
