Ex-school district employee jailed for hacks on former employer

Collection of June 11–13, 2026 incidents: Oracle disclosed a critical PeopleSoft zero‑day (CVE-2026-35273) enabling unauthenticated RCE and actively exploited in data theft attacks; CISA issued a fast patch order for an actively exploited Ivanti Sentry flaw; Arch User Repository packages were compromised to distribute a Linux rootkit and infostealer; a decade‑old phpBB authentication bypass was fixed; Chinese APT operators hijacked an organization’s authentication flow and maintained visibility/persistence for 10 years; a former school-district IT employee was sentenced after disruptive hacks;