DAILY BRIEFING
ShinyHunters Suspect Detained in Jordan; TA419 Targets U.S. AI Policy Experts
Today's briefing covers the arrest of a key ShinyHunters member in Jordan and a targeted Chinese phishing campaign against U.S. AI experts.
5 stories2 min read
Law enforcement developments and state-sponsored espionage dominate today's briefing. A key suspect linked to the cybercrime collective ShinyHunters has been detained overseas and is cooperating with U.S. federal authorities, potentially exposing critical infrastructure and identity of group members.
China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
A new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial intelligence (AI) experts working for U.S.
ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members
A key ShinyHunters member known as Rey (Saif al-Din Khader) was detained in Jordan on September 29, 2026. He is currently cooperating with the FBI and law enforcement to identify other members of the extortion group, which is linked to Scattered LAPSUS$ Hunters.
- Why it matters
- The detention and cooperation of a primary administrator may disrupt operations for ShinyHunters and associated cybercrime syndicates like Scattered Spider and LAPSUS$.
Anthropic asks Claude users to share voice data for AI model training
The requested story content could not be retrieved because the target website presented an anti-bot security verification check.
Google Gemini could soon get full access to your Mac’s files, apps and the web
The requested story content could not be retrieved because the target website presented an anti-bot security verification check.
ShinyHunters hacker reportedly detained in Jordan, aiding FBI
The requested story content could not be retrieved because the target website presented an anti-bot security verification check.
Key takeaways
- ShinyHunters administrator Saif al-Din Khader ('Rey') was detained in Jordan on September 29, 2026, and is cooperating with the FBI.
- China-nexus group TA419 is conducting AitM credential phishing targeting U.S. AI policy experts at think tanks and universities.
- TA419 attackers spoofed prominent researchers and Anthropic employees with subjects regarding military integration of AI models.