Cybersecurity briefing — 2026-06-13

• Splunk Sidecar Turns Internal Trust Into RCE
• AUR Recipe Hijack Bypasses Package Trust
• Login Software Became Velvet Ant’s Persistence Layer
• KYC Records Turn Laundering Hub Into Evidence
• Free Phishing Platform Takedown Leaves Stolen Data Behind
• Observability Output Becomes a Command Channel
• Chrome Extensions Fake Organic Traffic at Scale
• RTKBase Credentials Turned a Water Leak Into Pivot Risk
• UNC1151 Moves Its Phishing Machine to Gmail