Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, data breaches, ransomware developments, and key policy updates to keep you informed and secure in the fast-evolving digital landscape.
1. Critical Splunk Enterprise Flaw Allows Unauthenticated Remote Code Execution
Published: June 13, 2026
Splunk has patched a critical vulnerability (CVE-2026-20253, CVSS 9.8) in Splunk Enterprise that lets unauthenticated attackers perform arbitrary file operations and potentially achieve remote code execution via the PostgreSQL sidecar service. Affected versions below 10.2.4 and 10.0.7 are impacted; Splunk Cloud is not.
2. Over 400 Arch Linux AUR Packages Hijacked for Infostealer and eBPF Rootkit
Published: June 12, 2026
Attackers compromised more than 400 packages in the Arch User Repository (AUR), altering build scripts to deploy a Rust-based credential stealer and eBPF rootkit. Users who built or updated AUR packages since June 11 should verify and check affected lists. This supply chain attack highlights risks in community repositories.
3. U.S. Government Orders Anthropic to Suspend Advanced AI Models for Foreign Nationals
Published: June 13, 2026
Anthropic disabled access to its most advanced models (Claude Fable 5 and Mythos 5) worldwide after a U.S. order citing national security and potential jailbreak risks. The company disputes the scope but is complying while seeking restoration. This reflects growing AI export control tensions.
4. Google Sues Chinese Smishing Network Using Gemini AI for Phishing Campaigns
Published: June 12, 2026
Google is taking legal action against a Chinese network operating the “Outsider” phishing-as-a-service kit, which allegedly used Gemini AI to generate phishing pages and launch large-scale smishing attacks impersonating brands. The FBI has also disrupted related operations.
5. China-Linked Hackers Maintained Decade-Long Persistence via Backdoored Linux Login Software
Published: June 12, 2026
The Velvet Ant group (China-nexus) backdoored PAM and OpenSSH components for nearly 10 years, enabling stealthy access and credential harvesting on air-gapped or isolated networks. This sophisticated persistence technique evaded traditional detection.
6. Oracle Mitigates PeopleSoft Zero-Day Exploited in Data Theft Attacks
Published: June 11, 2026
Oracle addressed a critical unauthenticated remote code execution zero-day (CVE-2026-35273) in PeopleSoft Suite, actively exploited by ShinyHunters for data theft. Organizations are urged to apply mitigations immediately.
7. CISA Shortens Vulnerability Remediation Window to Three Days Amid AI Threats
Published: June 10, 2026 (ongoing directives)
CISA issued Binding Operational Directive 26-04, requiring federal agencies to remediate high-risk vulnerabilities within three days. This responds to accelerated threats from AI-enabled attackers. Related actions include orders for Ivanti and other flaws.
8. Novo Nordisk Discloses Clinical Trials Data Breach
Published: June 12, 2026
The pharmaceutical giant behind major insulin production reported a breach impacting patient data from clinical trials. This underscores risks in the healthcare and life sciences sector.
Stay Vigilant
Cyber threats continue to accelerate with AI integration, supply chain compromises, and sophisticated state-sponsored operations. Patch promptly, monitor for anomalous activity, implement least-privilege principles, and consider advanced defenses like micro-segmentation and AI-assisted detection. Subscribe to our newsletter for daily/weekly updates, and prioritize tools for vulnerability management and threat intelligence. Stay safe online!