AUR Supply-Chain Hijack: 400+ Packages | Splunk RCE, Linux Backdoor, AI Smishing, Conti Plea

Daily cybersecurity briefing for June 13, 2026. This episode covers 5 ranked stories. - Arch Linux AUR hijack: Attackers took over 400+ community packages, altering build scripts to drop a Rust-based infostealer; with root, it can deploy an eBPF rootkit for stealth. Supply-chain risk for users who built affected packages. - Splunk Enterprise critical flaw (CVE-2026-20253, CVSS 9.8): Unauthenticated file operations enabling potential RCE. Fixed in 10.2.4 and 10.0.7—admins should patch immediately. - Long-term Linux backdoor: A China-linked group (tracked as Velvet Ant) backdoored PAM and OpenSSH, maintaining access for nearly a decade. - AI smishing operation: Google filed suit alleging a China-based network used Gemini to craft phishing SMS, tied to the Outsider phishing-as-a-service kit. - Conti case: A Ukrainian national pleaded guilty in the U.S. to conspiracy charges related to the Conti ransomware operation. Get the daily newsletter for links, IOCs, and follow-up coverage: https://kernelpanicbrief.substack.com #cybersecurity #infosec #threatintel #linux #archlinux #supplychain #ransomware #phishing #smishing #splunk #ebpf Recommended tools: Disclosure: This section contains paid affiliate links. We may earn a commission if you purchase through these links. - Sophos: Endpoint and malware protection for Windows, Linux, and business environments where malware, ransomware, exploited vulnerabilities, or privilege escalation matter. https://prf.hn/l/ojNAEE2/ - NordPass: Helps reduce password reuse and credential exposure risk, especially for credential theft, account takeover, developer secrets, and supply-chain attacks. https://go.nordpass.io/aff_c?offer_id=754&aff_id=143674 - YubiKey 5 NFC: Hardware-backed MFA for phishing-resistant account protection. https://amzn.to/4sYqtPc

Видео AUR Supply-Chain Hijack: 400+ Packages | Splunk RCE, Linux Backdoor, AI Smishing, Conti Plea канала The Kernel Panic Brief