Bottom line: The Shai-Hulud hackers have been caught, and their cybercrime spree has resulted in significant financial losses.
What's happening: Ivan Radul and Colin Kroll, identified by the US Department of Justice, allegedly used compromised credentials to access and manipulate systems at over 1,000 organizations, including OpenAI, in an effort to steal sensitive data.
What to do: Security teams should immediately review their access controls and multi-factor authentication (MFA) policies to ensure they are not vulnerable to similar attacks, and consider implementing advanced threat detection tools to identify potential compromises.