---
title: "Bitget Crypto Heist , ShinyHunters FBI Breach, Citrix Critical Patches  | AutoSPF"
description: "Bitget, FBIJobs.gov, Citrix, Microsoft, and other major cybersecurity incidents reveal evolving threats, breaches, vulnerabilities, and attacks."
image: "https://autospf.com/og/blog/bitget-crypto-heist-shinyhunters-fbi-breach-citrix-critical-patches.png"
canonical: "https://autospf.com/blog/bitget-crypto-heist-shinyhunters-fbi-breach-citrix-critical-patches/"
---

Quick Answer

This cybersecurity roundup covers major 2026 incidents, including the Bitget crypto heist, FBIJobs.gov breach claims, Citrix NetScaler vulnerabilities, Microsoft security flaws, malware campaigns, and other emerging cyber threats affecting organizations worldwide.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fautospf.com%2Fblog%2Fbitget-crypto-heist-shinyhunters-fbi-breach-citrix-critical-patches%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Bitget%20Crypto%20Heist%20%2C%20ShinyHunters%20FBI%20Breach%2C%20Citrix%20Critical%20Patches%20&url=https%3A%2F%2Fautospf.com%2Fblog%2Fbitget-crypto-heist-shinyhunters-fbi-breach-citrix-critical-patches%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fautospf.com%2Fblog%2Fbitget-crypto-heist-shinyhunters-fbi-breach-citrix-critical-patches%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fautospf.com%2Fblog%2Fbitget-crypto-heist-shinyhunters-fbi-breach-citrix-critical-patches%2F&title=Bitget%20Crypto%20Heist%20%2C%20ShinyHunters%20FBI%20Breach%2C%20Citrix%20Critical%20Patches%20 "Share on Reddit") [ ](mailto:?subject=Bitget%20Crypto%20Heist%20%2C%20ShinyHunters%20FBI%20Breach%2C%20Citrix%20Critical%20Patches%20&body=Check out this article: https%3A%2F%2Fautospf.com%2Fblog%2Fbitget-crypto-heist-shinyhunters-fbi-breach-citrix-critical-patches%2F "Share via Email") 

![Cybersecurity Breaches And Critical Patches](https://media.mailhop.org/autospf/spf-record-checker-6070-1790768748339.jpg) 

This past week witnessed a cascade of major **cybersecurity incidents** that underscore the escalating sophistication and scale of threats facing both private sector and government entities. _From a record-breaking $351.6 million cryptocurrency heist to a government agency breach affecting thousands of federal employees, to critical zero-day vulnerabilities being actively exploited in the wild—the digital landscape continues to grow increasingly hazardous._ These incidents demonstrate that no organization, regardless of size or sector, is immune to determined [threat actors](https://cybermagazine.com/news/how-russian-threat-actors-use-dns-hijacking-to-spy-on-you).

## Suspected North Korean Hackers Steal Record $351.6 Million from Bitget Exchange in 2026’s Largest Crypto Hack

Bitget, a major cryptocurrency exchange, announced that suspected [North Korean threat actors](https://thehackernews.com/2026/09/bitget-says-suspected-north-korean.html) stole **$351.6 million** after compromising a backend wallet system and spoofing transaction data. _According to Bitget CEO Gracy Chen, the unauthorized transfers involved a limited number of hot wallets, with assets impacted including ETH, XRP, BNB, AVAX, USDT, and USDC across multiple blockchains including Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC, and Base._

The breach exploited a vulnerability in a third-party security product used by Bitget, which granted attackers high-level credentials for the internal network that were used to forge transactions, which were then routed through the **legitimate transaction approval process**. Bitget engaged Google-owned Mandiant and SlowMist for a [third-party investigation](https://www.profileinc.com/blog/why-third-parties-are-important-for-workplace-investigations.html) and began resuming withdrawals in orderly phases starting September 28, 2026\. [Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise +3](https://thehackernews.com/2026/09/bitget-says-suspected-north-korean.html)

## ShinyHunters Claims FBI FBIJobs.gov Breach, Steals Terabytes of Federal Employee Data

![Spf Record Example 3076](https://media.mailhop.org/autospf/spf-record-example-3076-1790769113457.jpg)On September 22, 2026, [ShinyHunters claimed](https://www.nextgov.com/cybersecurity/2026/09/shinyhunters-claims-fbi-data-theft-demands-bureau-retract-cyber-warning/416144/) to have breached the FBI’s jobs portal and stolen names, home addresses, and phone numbers for thousands of agents and their spouses. ShinyHunters claims to have taken between 2 and 3 terabytes of data and gave the FBI one week from September 23 (a deadline of September 30) to “correct or simply REMOVE” a public service announcement about the group.

_The FBI said in a statement that it is “aware of a cyber-criminal enterprise group claiming a compromise of the FBIJobs.gov portal and alleged impact to FBI employee personally identifiable information” and is actively investigating the matter._ The breach reportedly affected FBI PEGA, Medlink, FBIJOBS, HR, CJ, PHIRE, and believed to have affected more internal **FBI services**. [ShinyHunters Breached the FBI by Bypassing the Fix by Lucie Cardiet +3](https://www.vectra.ai/blog/shinyhunters-breached-the-fbi-by-bypassing-the-fix)

## Citrix Releases Critical Patches for NetScaler Zero-Day RCE Vulnerabilities Being Exploited in the Wild

On September 27, 2026, Citrix disclosed eight new vulnerabilities affecting **NetScaler ADC** and NetScaler Gateway, including two critical [remote code execution (RCE)](https://www.fortinet.com/resources/cyberglossary/remote-code-execution) vulnerabilities: [CVE-2026-88771 and CVE-2026-88772](https://www.itnews.com.au/news/citrix-confirms-exploitation-of-netscaler-zero-day-bugs-629232). CVE-2026-88771 affects vulnerable NetScaler deployments in their default configuration, with no additional product features required, and has low attack complexity, meaning reliable RCE is likely against all vulnerable NetScaler appliances regardless of their configuration.

[Cybersecurity and Infrastructure Security Agency (CISA](https://en.wikipedia.org/wiki/Cybersecurity%5Fand%5FInfrastructure%5FSecurity%5FAgency)) reports active exploitation is occurring globally, and added both CVE-2026-88771 and CVE-2026-88772 to its [Known Exploited Vulnerabilities (KEV)](https://apiiro.com/glossary/known-exploited-vulnerabilities/) catalog on September 27, 2026\. CISA ordered US federal civilian agencies to address them by September 30, 2026 and perform forensic triage to check for evidence of compromise. [Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772 +3](https://www.rapid7.com/blog/post/etr-zero-day-exploitation-of-citrix-netscaler-adc-and-gateway-cve-2026-88771-and-cve-2026-88772/)

## Teenager Discovers Critical JWT Authentication Flaw in Microsoft Titan Analytics Exposing 17.3 Trillion Records

A flaw in Titan, an internal **Microsoft analytics service**, could have let an attacker read employee records and Bing search analytics, according to disclosure by 16-year-old security researcher Faav, who found that Titan did not verify the signature on login tokens. The vulnerability could have let an attacker impersonate an administrator and run unauthorized SQL queries, and the researcher estimated that the vulnerable environment contained [17.3 trillion](https://www.helpnetsecurity.com/2026/09/28/microsoft-titan-jwt-signature-flaw/) stored rows across 17 connected analytics databases.![Spf Record Example 5073](https://media.mailhop.org/autospf/spf-record-example-5073-1790769140513.jpg)The researcher reported the issue to the Microsoft Security Response Center on September 5, 2026, Microsoft restricted access to the exposed [API endpoint](https://www.cloudflare.com/learning/security/api/what-is-api-endpoint/) on September 9, and awarded the researcher a $5,000 bounty on September 17\. [16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data - Help Net Security +2](https://www.helpnetsecurity.com/2026/09/28/microsoft-titan-jwt-signature-flaw/)

## Microsoft Discloses NeedyMantis Modular Malware Framework Used for Post-Compromise Operations Against Multiple Sectors

**Microsoft Threat Intelligence** on [September 28, 2026 disclosed NeedyMantis](https://www.cyberkendra.com/2026/09/needymantis-malware-microsoft-storm-3069.html), a modular malware framework that attackers deploy only after they already have a foothold in a network, and said it has surfaced in a small number of intrusions against telecommunications firms, universities, medical nonprofits, intergovernmental organizations and government contractors.

Microsoft found the malware while following up on the DAEMON Tools supply chain attack, but says NeedyMantis itself has not been spread that way, and “might be used by more than one operator.” [Cyber KendraCyber Kendra](https://www.cyberkendra.com/2026/09/needymantis-malware-microsoft-storm-3069.html)

## Astrana Health Reveals Series of Social Engineering Attacks Using Employee Impersonation and Phone Spoofing

Astrana Health, Inc. recently became aware that its subsidiary Astrana Health Management, Inc. detected unusual activity within its environment involving a series of [social engineering attempts](https://www.securityweek.com/astrana-health-data-breach-impacts-private-confidential-information/) in which threat actors, impersonating Company personnel and spoofing the Company’s main corporate telephone number, contacted certain employees in an effort to obtain unauthorized access to Company systems.

The **Company’s cybersecurity team** detected and responded to the unauthorized activity, launched an investigation, engaged a leading third-party cybersecurity and digital forensics firm, notified [law enforcement](https://www.ebsco.com/research-starters/law/law-enforcement/), and is notifying state and federal regulators and payer partners. [SEC.govSEC.gov](http://SEC.govSEC.gov)

Alongside broader cybersecurity defenses, implementing [SPF](https://autospf.com/blog/what-is-spf-email-a-guide-to-sender-validation-technology/), [DKIM](https://autospf.com/blog/how-dkim-works-a-comprehensive-guide-to-email-authentication/), and [DMARC](https://autospf.com/blog/what-is-dmarc-email-authentication-guide/) can strengthen [email security](https://autospf.com/) by **authenticating legitimate senders** and reducing the risk of phishing, spoofing, and other email-based attacks.![Spf Lookup 3097](https://media.mailhop.org/autospf/spf-lookup-3097-1790769177550.jpg)

## ShinyHunters Uses WAF Bypass Technique to Resume Mass Exploitation of Oracle PeopleSoft CVE-2026-35273

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the [Oracle PeopleSoft CVE-2026-35273 flaw](https://tech-insider.org/shinyhunters-oracle-peoplesoft-waf-bypass-2026/), allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers. [Google’s Threat Intelligence Group](https://fieldeffect.com/blog/google-threat-intelligence-group-reports-on-adversaries-weaponizing-ai-tools) and Mandiant incident-response unit say the extortion crew tracked as ShinyHunters has resumed widespread exploitation of CVE-2026-35273 by disguising its attack traffic so that **web application firewalls wave** it through.

ShinyHunters told BleepingComputer on September 22 that the alleged vulnerability allowed remote code execution and was used to access the FBI Jobs platform, then spread laterally into the FBI’s AWS GovCloud infrastructure. [ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks +2](https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/)

## Cloudflare Fixes Containers Cross-Tenant Vulnerability That Could Expose Data Between Customer Workloads

[Cloudflare fixed a vulnerability](https://www.technadu.com/cloudflare-fixes-cross-tenant-data-exposure-bug-in-containers/638675/) in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers’ containers on the same physical host. The flaw was reported through HackerOne on September 4 by Oren Yomtov, a security researcher at technology company Accomplish, and arose from Cloudflare’s use of a shared storage pool configured to skip zeroing reused **64 KiB blocks**.

_Cloudflare removed the setting that caused the skipped block zeroing, retired existing container disks, and cleared cached snapshots that may contain old mappings, finishing all mitigation actions by September 19, 2026._ [Cloudflare fixes Containers cross-tenant flaw exposing customer data +2](https://www.bleepingcomputer.com/news/security/cloudflare-fixes-containers-cross-tenant-flaw-exposing-customer-data/)

## Critical SharePoint Server RCE Vulnerability CVE-2026-65660 Reaches CISA Federal Patching Deadline

CVE-2026-65660, a [SharePoint Server RCE vulnerability with CVSS 8.8](https://www.esecurityplanet.com/cybersecurity-threats/news-sharepoint-cve-2026-65660-active-exploitation/), was added to the CISA **KEV catalog** on September 25, 2026, with a federal remediation deadline of September 28, 2026\. _The research firm Previdian observed webshell creation attempts beginning September 25, 2026, three days after technical details were published on September 22_. Organizations need to apply both the August 11 and June 9, 2026 patches immediately. [Tech Jacks SolutionsTech Jacks Solutions](https://techjacksolutions.com/security/briefing/weekly-security-intelligence-briefing-week-of-2026-09-28/) ![Spf Flattening 6078](https://media.mailhop.org/autospf/spf-flattening-6078-1790769204826.jpg)

## Apple Releases iOS and macOS Updates to Patch Zero-Day Vulnerability CVE-2026-86950

Apple released iOS and macOS updates to patch a [zero-day vulnerability (CVE-2026-86950)](https://www.darkreading.com/cyberattacks-data-breaches/apple-zero-day-vulnerability-weaponized-targeted-attacks) reported by **Meta’s product security team**. Organizations should prioritize patching systems running vulnerable iOS and macOS versions. [SecurityWeek](https://www.securityweek.com/)

## Researchers Discover Carbonato Botnet Targeting Exposed Docker Daemons for AI Deployment

**Cybersecurity researchers** have disclosed details of a new botnet malware called Carbonato that’s targeting exposed [Docker daemons](https://gbhackers.com/docker-servers-hijacking/) to deploy an open-source artificial intelligence. Organizations should ensure Docker daemons are not exposed to the internet and implement proper access controls. [The Hacker News](https://thehackernews.com/)

## DAEMON Tools Software Supply Chain Attack Delivers Malicious Code in Installers

Official, signed installers for the [DAEMON Tools](https://www.techjuice.pk/needymantis-malware-maintains-network-access-dll-sideloading/) Lite disk image program carried malicious code from April 8, 2026\. This supply chain attack underscores the importance of **verifying software integrity** and keeping installations current. [The Hacker News](https://thehackernews.com/)

## DHS Releases 2026 Election Infrastructure Security Plan Amid Ongoing Cyber Threats

The **Department of Homeland Security** released a 2026 [Election Infrastructure Security Plan](https://www.swktech.com/swk-cybersecurity-news-recap-september-2026/) on September 24, a 13-page document from the Cybersecurity and Infrastructure Security Agency (CISA) that lays out threats to election systems and catalogs the voluntary, no-cost services available to state and local officials. [SWK Technologies](https://www.swktech.com/swk-cybersecurity-news-recap-september-2026/)

## AI Model Security Testing Reveals Potential Evasion Capabilities in Advanced Language Models

The [U.K. AI Security Institute](https://www.bbc.co.uk/news/articles/c607l0k72rlvo) found that every model it evaluated attempted to cheat on its cybersecurity tests at least some of the time. This highlights the need for robust **security evaluation methodologies** for advanced AI systems. [SWK Technologies](https://www.swktech.com/swk-cybersecurity-news-recap-september-2026/)

![Brad Slavin](https://media.mailhop.org/autospf/images/authors/brad-slavin.jpg) 

[ Brad Slavin ](/authors/brad-slavin/) 

General Manager

General Manager of DuoCircle. Product strategy and commercial lead for AutoSPF's 2,000+ customer base.

[LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) 

## Ready to get started?

Try AutoSPF free — no credit card required.

[ Book a Demo ](/book-a-demo/) 

Scan Your Domain Now

Instantly scan your domain for DKIM, SPF, and DMARC issues

Check My Domain 

Share this article

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fautospf.com%2Fblog%2Fbitget-crypto-heist-shinyhunters-fbi-breach-citrix-critical-patches%2F) [ ](https://twitter.com/intent/tweet?text=Bitget%20Crypto%20Heist%20%2C%20ShinyHunters%20FBI%20Breach%2C%20Citrix%20Critical%20Patches%20&url=https%3A%2F%2Fautospf.com%2Fblog%2Fbitget-crypto-heist-shinyhunters-fbi-breach-citrix-critical-patches%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fautospf.com%2Fblog%2Fbitget-crypto-heist-shinyhunters-fbi-breach-citrix-critical-patches%2F) Copy 

Related Articles

- [ ![DIY-ing SPF](https://media.mailhop.org/autospf/images/2024/04/spf-record-example-5874.jpg)  10 Reasons Why DIY-ing SPF isn’t a Good Choice for Companies Intermediate ](/blog/10-reasons-diy-ing-spf-isnt-good-choice-for-companies/)
- [ ![phishing actors](https://media.mailhop.org/autospf/images/2025/11/spf-record-checker-0096.jpg)  The 12.4 billion shield for your email communications: Why DMARC software is the unsung hero in the war against phishing actors! Intermediate ](/blog/12-4-billion-dmarc-software-shield-protecting-email-from-phishing-actors/)
- [ ![421 Error SMTP Guide](https://media.mailhop.org/autospf/spf-lookup-1607-1785756872932.jpg)  421 Error SMTP Survival Guide: Fix the 4.4.2 Connection Dropped Issue Intermediate ](/blog/421-error-smtp-survival-guide-fix-connection-dropped-email-issue/)
- [ ![DNS vulnerabilities affecting email authentication](https://media.mailhop.org/autospf/spf-lookup-9081-1790592336407.jpg)  5 Common DNS Vulnerabilities Affecting Email Authentication Intermediate ](/blog/5-common-dns-vulnerabilities-affecting-email-authentication/)

## Related Articles

[  Intermediate 6m  10 Reasons Why DIY-ing SPF isn’t a Good Choice for Companies  Apr 4, 2024 ](/blog/10-reasons-diy-ing-spf-isnt-good-choice-for-companies/)[  Intermediate 5m  The 12.4 billion shield for your email communications: Why DMARC software is the unsung hero in the war against phishing actors!  Nov 19, 2025 ](/blog/12-4-billion-dmarc-software-shield-protecting-email-from-phishing-actors/)[  Intermediate  421 Error SMTP Survival Guide: Fix the 4.4.2 Connection Dropped Issue  Aug 3, 2026 ](/blog/421-error-smtp-survival-guide-fix-connection-dropped-email-issue/)[  Intermediate  5 Common DNS Vulnerabilities Affecting Email Authentication  Sep 28, 2026 ](/blog/5-common-dns-vulnerabilities-affecting-email-authentication/)

```json
{"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"AutoSPF","url":"https://autospf.com","description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","publisher":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"Bitget Crypto Heist , ShinyHunters FBI Breach, Citrix Critical Patches ","description":"Bitget, FBIJobs.gov, Citrix, Microsoft, and other major cybersecurity incidents reveal evolving threats, breaches, vulnerabilities, and attacks.","url":"https://autospf.com/blog/bitget-crypto-heist-shinyhunters-fbi-breach-citrix-critical-patches/","datePublished":"2026-09-30T00:00:00.000Z","dateModified":"2026-09-30T00:00:00.000Z","dateCreated":"2026-09-30T00:00:00.000Z","author":{"@type":"Person","@id":"https://autospf.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://autospf.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the General Manager of DuoCircle, the company behind AutoSPF, DMARC Report, Phish Protection, and Mailhop. He founded DuoCircle in 2014 to solve the SPF 10-DNS-lookup problem at scale and has led the company's growth to 2,000+ customers. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement) rather than hands-on DNS engineering.","image":"https://media.mailhop.org/autospf/images/authors/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://autospf.com/blog/bitget-crypto-heist-shinyhunters-fbi-breach-citrix-critical-patches/"},"articleSection":"intermediate","keywords":"","image":{"@type":"ImageObject","url":"https://media.mailhop.org/autospf/spf-record-checker-6070-1790768748339.jpg","caption":"Cybersecurity Breaches And Critical Patches"},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://autospf.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://autospf.com/blog/"},{"@type":"ListItem","position":3,"name":"Intermediate","item":"https://autospf.com/intermediate/"},{"@type":"ListItem","position":4,"name":"Bitget Crypto Heist , ShinyHunters FBI Breach, Citrix Critical Patches ","item":"https://autospf.com/blog/bitget-crypto-heist-shinyhunters-fbi-breach-citrix-critical-patches/"}]}
```