SAN DIEGO - TelAve -- SAN DIEGO, CA — November 3, 2026 — The ShinyHunters group breached FBIjobs.gov, the FBI's jobs portal, through a side door: an Oracle PeopleSoft platform managed for the FBI by a third-party contractor, Accenture. Oracle had issued fixes for the flaw in June; the patch was never applied. The FBI confirmed the breach in early October, the contractor was removed, and arrests followed.

Redthread Security, Inc. today published an analysis arguing the failure was a management model, not a missing assessment: vendor review, as practised, is a photograph — it certifies a moment, while the vendor's platform changes every day. A patch missed in June became a breach headline in October, and an honestly answered questionnaire could still have missed it.

More on TelAve News

• Kitchen Table Economics: An Invitation to Think Differently
• Win a $5,000 VIP Family Experience at the 100th Thanksgiving Day Parade in New York City
• CB Stuffer Announces Private Sale to Secure Future of Brand Growth
• The Fifth Annual "Bamboo Lantern Festival" to Illuminate Tokyo Mizumachi and Sumida River Walk®
• Iglesia.com Positioned in Multimillion-Dollar Domain Market with $10 Million Asking Price

"One of the most security-conscious organisations on earth was compromised because a vendor in its estate missed a patch for months, and nobody's process caught it," said Ben Le, founder of Redthread Security. "Your security is now the security of every vendor, platform, integration, AI tool, and contractor-managed system plugged into your estate — each a door you do not control, all changing daily."

Redthread's agentless platform assesses the estate continuously, including the third-party and AI surface: shadow-AI discovery finds the tools, agents, and integrations teams actually use, and exploit validation reproduces a weakness rather than assigning an inferred score. Its Agentic Trust & Protection Platform gives every agent a cryptographic agent identity (SPIFFE) bound to the build actually running, verified at call time, with revocation that propagates when tools drift. The platform publishes daily signed scans of the MCP registry — its November 1 scan covered 54,513 servers and found 1,509 listing swaps and 2,193 tools changed without a version bump. A free self-serve estate scan is available at redthreadsec.com.

More on TelAve News

• TCA VG: 2025 Funding Climbs to $9M across 43 Companies; Cumulative Returns Reach 5.3 MOIC & 22% IRR
• Searching for the Next LBE Creator: CalArts Launches First-Ever D.R.E.A.M.S. Pitch Competition
• Integris Composites Joins International Sea Power Conference Aboard HMS Prince of Wales
• Commercial Sales Launch Following FDA Approval; National Sales Force Now in Action as January Shipments and Major Market Opportunity Take Shape
• Cellhire strengthens IoT team with two new appointments as demand grows

Redthread is opening two to three founding design-partner slots for teams deploying AI agents in production. The pilot is free for 30–45 days, with founding-partner pricing locked for participating companies.

The full analysis is available at https://redthreadsec.com/blog/fbijobs-vendor-breach

About Redthread Security, Inc.: Redthread Security is an AI-native application protection and agent trust company based in San Diego, California. Learn more at redthreadsec.com.
Media contact: Ben Le, Founder, Redthread Security, Inc. — ben.le@redthreadsec.com