2026-06-13-40b26572

• Items dropped (deduplication): CVE-2026-49261 (MariaDB Galera wsrep_notify_cmd OS command injection, CVSS 10.0) returned by S1 and S2 — already covered as the 2026-06-12 deep dive; no material in-window delta, so not re-reported.
• Items dropped (out-of-window, PD-7): OpenSSL 9 June 2026 batch advisory (CVE-2026-45447 PKCS7_verify heap UAF plus CMS/QUIC/OCSP issues) — freshest source is the CERT-FR advisory of 2026-06-10, outside the 36 h window with no fresher in-window development. CERT-EU advisory 2026-008 on Ivanti Sentry (CVE-2026-10520/CVE-2026-10523) — the EU-institutions advisory is dated 2026-06-10 and the underlying CVEs were covered 2026-06-10; the only delta (CERT-EU echoing the vendor advisory) is itself out-of-window.
• CVEs that did not clear a § 2 inclusion gate: CVE-2026-6552 (GitLab EE Group SAML account takeover, CVSS 8.7) — post-auth (Group Owner required), no in-the-wild exploitation and no public PoC, CVSS below the 9.0 EUVD threshold; patched in GitLab 19.0.2/18.11.5/18.10.8 and worth scheduling, but it does not meet the § 2 bar (KEV / EUVD-exploited / EUVD CVSS 9–10 / vendor-confirmed ITW / pre-auth RCE with public PoC). The LangGraph chain (CVE-2025-67644 / CVE-2026-28277 / CVE-2026-27022) is carried in § 3 as research rather than § 2 — no ITW, CVSS below threshold.
• Editorial relevance cut: INTERPOL "Operation Ramz" / SniperDz PhaaS takedown (201 arrests across 13 MENA countries) — genuine and corroborated (THN + Infosecurity Magazine), but a MENA-centred law-enforcement takedown with only marginal CH/EU nexus (French/German templates) and no 1–7-day defender action; not promoted.
• Reduced-confidence / UA-blocked primaries: the Sygnia "Operation Highland" post (sygnia.co, § 5) and the Tenet Security "Agentjacking" post (tenetsecurity.ai, § 3) both return automated-UA blocks (Imunify360 / Cloudflare). Each item leads with a verified-live The Hacker News relay as primary and lists the vendor originator as an additional source; the vendor pages are likely reachable from a human browser. Technical claims for both rest on the THN relay plus the named vendor report.
• Single-source / national-CERT-primary items: none — every published item carries ≥2 independent sources.
• Reduced confidence (aggregator-only sourcing): the Coupang PIPC item (§ 1) rests on The Record and BleepingComputer; the primary regulator announcement (PIPC) is Korean-language and was not directly fetched this run. The facts (fine amount, root cause, evidence-obstruction finding) are consistent across both outlets, but the item carries one degree of separation from the regulator's own filing.
• Contradictions: none material. Minor figure variation across outlets on the Outsider/SniperDz scale numbers; § 3 deliberately omits those counts as non-operational.
• Coverage gaps: databreaches-net (HTTP 403 via bridge, no usable Wayback snapshot — 6+ consecutive runs); sec-disclosures-edgar (efts.sec.gov full-text search returned zero results across attempted date ranges — endpoint degraded or indexing lag); group-ib (HTTP 503 via bridge, no Wayback — SniperDz primary unreachable); sophos-xops (HTTP 503 again — rotation-priority warning confirmed); inside-it-ch (HTTP 403, no usable Wayback — unresolvable); cert-fr-actu (actualité RSS feed stalled at Oct 2025; avis feed current).

Unmatched action items (migrated)

• Run a binary-integrity sweep of the Linux auth stack — verify pam_unix.so, sshd and ssh against package-manager checksums (rpm -V / dpkg --verify, AIDE/Tripwire) across the fleet; this is the only reliable way to surface Velvet Ant-class trusted-binary backdoors that produce no EDR or failed-login signal (see § 5).
• Audit AUR usage on developer/CI hosts and hunt for the eBPF rootkit — restrict AUR-helper use on privilege-holding CI runners, alert on npm/bun install spawned from makepkg, and enumerate ls /sys/fs/bpf/hidden_* across Linux developer endpoints (see § 1).
• Audit offboarding token/key revocation — inventory signing keys and OAuth client secrets tied to departed staff/contractors, confirm access logs fall under legal-hold retention, and add anomaly detection for credential use from unexpected geographies (Coupang lesson, § 1).
• Lock down self-hosted LangGraph and Sentry-MCP exposure — pin langgraph ≥1.0.10 / langgraph-checkpoint-sqlite ≥3.0.1 / langgraph-checkpoint-redis ≥1.0.2 and treat get_state_history() filters as untrusted; for AI coding agents, move Sentry MCP to a read-only service account, rotate exposed DSNs and remove them from client bundles/repos (see § 3).
• Brief clinical-research and pharma-partner staff on spear-phishing — the Novo Nordisk HCP data set (name + phone + WhatsApp) is a complete targeting package; no IOCs exist to anchor a technical hunt, so the control is awareness against SMS/WhatsApp pretexting (see § 1).

Migrated from briefs/2026-06-13.md (v2).