Second Zero-Day Claim Hits US Agency Same Week

ShinyHunters says it used an unpatched flaw in Oracle PeopleSoft, the HR and payroll platform, to pull FBI employee data. It is the second time in five months this masthead has covered the group claiming a breach of a major American institution on the strength of its own screenshots. Kai Tanner's desk has the detail: no CVE number assigned, no PeopleSoft patch out, and the FBI has neither confirmed nor denied a breach occurred. The tooling is what sets this one apart from the usual extortion playbook. ShinyHunters has spent this year building campaigns on stolen access, not novel exploits, so an actual zero-day would mark a change in capability, not just a change in target.

The timing does the FBI no favors. Xi Jinping touches down in Washington on September 24, and Mei Chen's desk reports his opening ask of Trump is explicit: halt Taiwan arms sales. Vincent Lai's filing adds that a China Coast Guard vessel rammed a Philippine ship in the South China Sea this week too, a collision that runs on its own maritime timetable and has nothing to do with the summit calendar, whatever the headlines imply. Xi is not choosing between pressure and diplomacy this week. He is bringing both to the same table and asking Trump to treat the pressure as a favor owed.

Elsewhere, CISA added a Dassault Systèmes DELMIA Apriso flaw to its actively exploited list the same week, a second enterprise back-office platform now confirmed under attack rather than merely claimed. Rachel Lam's desk connects the finance angle: a German regulator fined UBS over Credit Suisse legacy tax issues, UBS is fighting Swiss capital rules it says could cost it billions, and StanChart says it already exited a Russian laundering network the same week that network surfaced in a separate report. Lam notes three banks and three regulators appeared in one week.

A hacking group claimed a breach this morning and a government stayed quiet about it. That happened with a different platform too. In both the FBI's HR records and a Chinese naval vessel's intentions ahead of a state visit, claim came first and confirmation has not followed. Institutions that used to issue same-day statements are now running on their own clock, and the public is left reading screenshots and inferring the rest.