ShinyHunters’ FBI Breach, OpenAI’s Bug Bounty Drama, and the Rise of ClickFix

Welcome to The Low Down, the best show on the internet for hackers Listen on Spotify! https://go.lowdownpod.com/spotify The Low Down is presented by Maze. LinkedIn: https://www.linkedin.com/company/mazehq/ X: https://twitter.com/Maze_Security Follow Us! https://www.instagram.com/lowdown.pod Today we're talking about: ShinyHunters Has a Reputation to Protect ShinyHunters says it hacked the FBI to protect its business. Apparently, even an extortion crew needs good PR. We get into why reputation matters to people who make their money threatening companies, and Ed takes a look at the PeopleSoft bugs that may explain the way in. Some of the exposed records reportedly belong to the FBI's own hacking unit. https://www.rapid7.com/blog/post/etr-active-exploitation-of-oracle-peoplesoft-zero-day-cve-2026-35273/ https://www.404media.co/fbi-hack-exposed-fbis-own-hacking-unit-remote-operations-shinyhunters/ https://www.theregister.com/cyber-crime/2026/09/25/shinyhunters-tells-the-reg-we-hacked-the-fbi-to-protect-our-business/5299250 OpenAI's Very Unwelcome Pull Request How far do you go to prove a bug? Hacktron used an employee's Codex account to open a PR in OpenAI's internal repo. Ed thinks th…