Ex-school district employee jailed for hacks on former employer
2026-06-14T13:23:28Z•b8a0e79db5d73de165644323024f2ff1ebdbadb4981add52192939c50512bd1a
AUR compromiseAnthropicCISACVE-2026-35273ChinaContiIvanti SentryKyushu ElectricNovo NordiskTchapactive-exploitauthentication-bypassdata breachinfostealerinsider threatlegal/sentencinglinux rootkitmodel-access restrictionnation-statepeopleSoftpersistencephpBBransomwaresupply-chainzero-day
What happened
Multiple high-impact security incidents and active exploits were reported: Oracle disclosed a critical PeopleSoft zero-day (CVE-2026-35273) being actively exploited in ShinyHunter data-theft attacks; CISA issued an urgent directive forcing federal patching of an actively exploited Ivanti Sentry flaw; over 400 Arch Linux AUR packages were compromised to distribute a Linux rootkit and infostealer; a 10-year phpBB authentication-bypass bug was fixed that allowed login-as-any-user; Chinese state-aligned actors hijacked an organization’s authentication flow and maintained persistent access for a ~十
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- b8a0e79db5d73de165644323024f2ff1ebdbadb4981add52192939c50512bd1a
- Enrichment time
- 2026-06-14T13:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.