Weekly Update 524: Live From Copenhagen
Summary
Troy Hunt's Weekly Update 524 covers two ShinyHunters-related arrests (Pepijn in the Netherlands and Saif in Jordan), reflecting the inevitable legal crackdown on the long-running cybercrime group, and introduces new blog sponsor Origin, an AI agent visibility and endpoint security tool.
<img src="https://storage.ghost.io/c/fb/33/fb3391dc-723d-4e74-b95a-d641b5feb38e/content/images/2026/10/maxresdefault.jpg" alt="Weekly Update 524: Live From Copenhagen"><p>I'm in Denmark! Well, just, I'm now at Copenhagen airport ready to begin the long trek home, with the final event at GOTO now done and going just perfectly. This week, there are two ShinyHunters arrests in the news: <a href="https://krebsonsecurity.com/2026/09/dutch-police-arrest-reformed-hacker-in-shiny-hunters-investigation/?ref=troyhunt.com" rel="noreferrer">Pepijn in the Netherlands</a> and then <a href="https://thehackernews.com/2026/10/shinyhunters-suspect-rey-reportedly.html?ref=troyhunt.com" rel="noreferrer">Saif in Jordon</a>. It's an inevitable outcome, of course, and as I say this week, it was also the most likely one. Time will tell how many more join their ranks, but the seriousness of the crimes, the length of time they were perpetrated over, and the motivations behind them will certainly see substantial custodial sentences.</p><p>In other news, this week I'm properly introducing a new sponsor for the blog: <a href="https://www.originhq.com/on-demand/next-layer-of-endpoint-security?utm_source=troyhunt&utm_medium=site&utm_campaign=direct-buys&utm_content=sacr-on-demand" rel="noreferrer">Origin</a>. One of our next AI frontiers is understanding what agents have actually done (and we've all seen news of where they're been a bit too, well, "creative" in executing their tasks), and Origin's solution gives you visiblity into just that. Check them out, and a big thanks to them for their ongoing support.</p>
<!--kg-card-begin: html-->
<div><div style="width: 170px; display: inline-block; margin-right: 3px;"><a href="https://itunes.apple.com/au/podcast/troy-hunts-weekly-update-podcast/id1176454699?ref=troy-hunt"><img src="https://storage.ghost.io/c/fb/33/fb3391dc-723d-4e74-b95a-d641b5feb38e/content/images/2018/05/Listen-on-Apple-Podcasts.svg" alt="Weekly Update 524: Live From Copenhagen"></a></div><div style="width: 175px; display: inline-block; margin-right: 3px;"><a href="https://www.youtube.com/playlist?list=PL7LAAxaabizMAXnJe0s3xjQ30q12EVmjt&ref=troyhunt.com"><img src="https://storage.ghost.io/c/fb/33/fb3391dc-723d-4e74-b95a-d641b5feb38e/content/images/2024/09/Watch-and-Listen-on-YouTube.svg" alt="Weekly Update 524: Live From Copenhagen"></a></div><div style="width: 118px; display: inline-block; margin-right: 3px;"><a href="https://open.spotify.com/show/7jMtKFohdrw6qmz8AkLqit?ref=troy-hunt"><img src="https://storage.ghost.io/c/fb/33/fb3391dc-723d-4e74-b95a-d641b5feb38e/content/images/2019/10/spotify.svg" class="kg-image" alt="Weekly Update 524: Live From Copenhagen"></a></div><div style="width: 120px; display: inline-block;"><a href="https://omny.fm/shows/troy-hunt-weekly-update/playlists/podcast.rss?ref=troy-hunt"><img src="https://storage.ghost.io/c/fb/33/fb3391dc-723d-4e74-b95a-d641b5feb38e/content/images/2018/07/Download-via-RSS.svg" alt="Weekly Update 524: Live From Copenhagen"></a></div><iframe width="100%" height="480" src="https://www.youtube.com/embed/WSTH3O4tJGU" title="YouTube video player" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen loading="lazy" spellcheck="false"></iframe></div>
<!--kg-card-end: html-->
View Cached Full Text
Cached at: 10/04/26, 02:58 PM
# Weekly Update 524: Live From Copenhagen
Source: [https://www.troyhunt.com/weekly-update-524/](https://www.troyhunt.com/weekly-update-524/)
I'm in Denmark\! Well, just, I'm now at Copenhagen airport ready to begin the long trek home, with the final event at GOTO now done and going just perfectly\. This week, there are two ShinyHunters arrests in the news:[Pepijn in the Netherlands](https://krebsonsecurity.com/2026/09/dutch-police-arrest-reformed-hacker-in-shiny-hunters-investigation/?ref=troyhunt.com)and then[Saif in Jordon](https://thehackernews.com/2026/10/shinyhunters-suspect-rey-reportedly.html?ref=troyhunt.com)\. It's an inevitable outcome, of course, and as I say this week, it was also the most likely one\. Time will tell how many more join their ranks, but the seriousness of the crimes, the length of time they were perpetrated over, and the motivations behind them will certainly see substantial custodial sentences\.
In other news, this week I'm properly introducing a new sponsor for the blog:[Origin](https://www.originhq.com/on-demand/next-layer-of-endpoint-security?utm_source=troyhunt&utm_medium=site&utm_campaign=direct-buys&utm_content=sacr-on-demand)\. One of our next AI frontiers is understanding what agents have actually done \(and we've all seen news of where they're been a bit too, well, "creative" in executing their tasks\), and Origin's solution gives you visiblity into just that\. Check them out, and a big thanks to them for their ongoing support\.
[](https://itunes.apple.com/au/podcast/troy-hunts-weekly-update-podcast/id1176454699?ref=troy-hunt)
[](https://www.youtube.com/playlist?list=PL7LAAxaabizMAXnJe0s3xjQ30q12EVmjt&ref=troyhunt.com)
[](https://open.spotify.com/show/7jMtKFohdrw6qmz8AkLqit?ref=troy-hunt)
[](https://omny.fm/shows/troy-hunt-weekly-update/playlists/podcast.rss?ref=troy-hunt)
[Weekly update](https://www.troyhunt.com/tag/weekly-update/)
Similar Articles
Weekly Update 523: Live From a Norwegian Fjord
Troy Hunt's weekly update from a Norwegian fjord covers ShinyHunters' trajectory targeting Cl0p and the FBI, and introduces Origin as a sponsor for AI agent monitoring tooling.
Weekly Update 502
Troy Hunt's weekly update discusses how ShinyHunters uses social engineering and vishing to breach major brands, with insights from Mandiant.
Weekly Update 506
Troy Hunt discusses the ongoing ShinyHunters data breaches and dumps, noting the criminality, organizational responses, and the seemingly endless cycle of new victims appearing, such as DentaQuest and BCD Travel.
Weekly Update 505
Troy Hunt's weekly update reports that the ShinyHunters hacking group has resurfaced with new claims against DentaQuest and Charter Communications after a brief silence following the Instructure ransom payment.
Weekly Update 503
Troy Hunt's weekly update covers Instructure's 'pay or leak' deadline from ShinyHunters, with the company remaining silent and lawsuits being prepared.