SAN DIEGO - eTradeWire -- SAN DIEGO, CA — November 3, 2026 — The ShinyHunters group breached FBIjobs.gov, the FBI's jobs portal, through a side door: an Oracle PeopleSoft platform managed for the FBI by a third-party contractor, Accenture. Oracle had issued fixes for the flaw in June; the patch was never applied. The FBI confirmed the breach in early October, the contractor was removed, and arrests followed.

Redthread Security, Inc. today published an analysis arguing the failure was a management model, not a missing assessment: vendor review, as practised, is a photograph — it certifies a moment, while the vendor's platform changes every day. A patch missed in June became a breach headline in October, and an honestly answered questionnaire could still have missed it.

More on eTradeWire News

• AI Trading Robots Track Automotive Technology and Advanced Manufacturing Stocks (NVDA, TSLA, MBLY, NXPI, QCOM, AMD)
• CEO Guide to PEST and SWOT analysis for volatile business markets
• PhantomByte Publishes Agent Automation Toolkit: 92 Scripts Behind a Two-Agent AI System
• ShopSnap Opens Its Stores to AI Shopping Assistants With MCP and UCP
• Trans Producer's Sophomore Album Tackles Feminism, Queer Pride, and Housing Discrimination

"One of the most security-conscious organisations on earth was compromised because a vendor in its estate missed a patch for months, and nobody's process caught it," said Ben Le, founder of Redthread Security. "Your security is now the security of every vendor, platform, integration, AI tool, and contractor-managed system plugged into your estate — each a door you do not control, all changing daily."

Redthread's agentless platform assesses the estate continuously, including the third-party and AI surface: shadow-AI discovery finds the tools, agents, and integrations teams actually use, and exploit validation reproduces a weakness rather than assigning an inferred score. Its Agentic Trust & Protection Platform gives every agent a cryptographic agent identity (SPIFFE) bound to the build actually running, verified at call time, with revocation that propagates when tools drift. The platform publishes daily signed scans of the MCP registry — its November 1 scan covered 54,513 servers and found 1,509 listing swaps and 2,193 tools changed without a version bump. A free self-serve estate scan is available at redthreadsec.com.

More on eTradeWire News

• Washington Nurse Introduces Nightingale Care Hub to Help Families Organize Care
• EvilJay, comedian, Controversy King, Chicago, comedy, music
• "A Crown, a Calling, and a Legacy: The Story of Mrs. Black Universe 2006"
• Planning a Garage Removal in Leeds? Yorkshire Asbestos Solutions Sets Out What to Check First
• HIRO Ostomy Belt Launch by Richard O'Hamill

Redthread is opening two to three founding design-partner slots for teams deploying AI agents in production. The pilot is free for 30–45 days, with founding-partner pricing locked for participating companies.

The full analysis is available at https://redthreadsec.com/blog/fbijobs-vendor-breach

About Redthread Security, Inc.: Redthread Security is an AI-native application protection and agent trust company based in San Diego, California. Learn more at redthreadsec.com.
Media contact: Ben Le, Founder, Redthread Security, Inc. — ben.le@redthreadsec.com