pwn.watch: ShinyHunters incident updates https://pwn.watch/t/shinyhunters Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:42:01 GMT [high] Red Hat Consulting GitLab breached: ~800 customer engagement reports stolen: FINRA alert to member firms https://pwn.watch/i/red-hat-consulting-gitlab-breach-october-2025 red-hat-consulting-gitlab-breach-october-2025:2025-10-10:FINRA alert to member firms Fri, 10 Oct 2025 00:00:00 GMT high Source: https://www.finra.org/rules-guidance/guidance/red-hat-security-incident-20251010 Status: closed, no-fix-needed [high] Red Hat Consulting GitLab breached: ~800 customer engagement reports stolen: Red Hat confirms the incident https://pwn.watch/i/red-hat-consulting-gitlab-breach-october-2025 red-hat-consulting-gitlab-breach-october-2025:2025-10-02:Red Hat confirms the incident Thu, 02 Oct 2025 00:00:00 GMT high Source: https://www.redhat.com/en/blog/security-update-incident-related-red-hat-consulting-gitlab-instance Status: closed, no-fix-needed [high] Red Hat Consulting GitLab breached: ~800 customer engagement reports stolen: Crimson Collective claims the Red Hat GitLab theft https://pwn.watch/i/red-hat-consulting-gitlab-breach-october-2025 red-hat-consulting-gitlab-breach-october-2025:2025-10-01:Crimson Collective claims the Red Hat GitLab theft Wed, 01 Oct 2025 00:00:00 GMT high Source: https://www.bleepingcomputer.com/news/security/red-hat-confirms-security-incident-after-hackers-breach-gitlab-instance/ Status: closed, no-fix-needed [high] Vishing campaign steals Salesforce data from Google and others (UNC6040 / ShinyHunters): Google confirms the breach exposed prospective Google Ads customers' contact info https://pwn.watch/i/salesforce-vishing-data-theft-unc6040-2025 salesforce-vishing-data-theft-unc6040-2025:2025-08:Google confirms the breach exposed prospective Google Ads customers' contact info Fri, 01 Aug 2025 00:00:00 GMT high Source: https://www.bleepingcomputer.com/news/security/google-confirms-data-breach-exposed-potential-google-ads-customers-info/ Status: closed, no-fix-needed [high] Vishing campaign steals Salesforce data from Google and others (UNC6040 / ShinyHunters): Google Threat Intelligence describes UNC6040's vishing and Data Loader abuse https://pwn.watch/i/salesforce-vishing-data-theft-unc6040-2025 salesforce-vishing-data-theft-unc6040-2025:2025-06-04:Google Threat Intelligence describes UNC6040's vishing and Data Loader abuse Wed, 04 Jun 2025 00:00:00 GMT high Source: https://cloud.google.com/blog/topics/threat-intelligence/voice-phishing-data-extortion Status: closed, no-fix-needed [high] Vishing campaign steals Salesforce data from Google and others (UNC6040 / ShinyHunters): Google's corporate Salesforce instance breached by UNC6040 https://pwn.watch/i/salesforce-vishing-data-theft-unc6040-2025 salesforce-vishing-data-theft-unc6040-2025:2025-06:Google's corporate Salesforce instance breached by UNC6040 Sun, 01 Jun 2025 00:00:00 GMT high Source: https://www.bleepingcomputer.com/news/security/google-suffers-data-breach-in-ongoing-salesforce-data-theft-attacks/ Status: closed, no-fix-needed