Today's key risks include a max-severity Joomla Content Editor plugin flaw, actively exploited and requiring immediate patching by federal agencies and any organization using Joomla with Widget Factory. Microsoft is addressing a critical Defender zero-day, "RoguePlanet," highlighting the ongoing need for widespread security updates. Kodak is investigating a data breach claimed by ShinyHunters, reinforcing that no entity is immune. Developers face specific threats with 15 malicious plugins on the JetBrains Marketplace designed to steal AI API keys, emphasizing the need for rigorous plugin vetting. Android users are targeted by Rokarolla, a new banking trojan impacting 217 banking and crypto apps, underscoring the importance of mobile app vigilance.

We also explore the accelerating AI landscape, with Google Cloud Tech's insights on building long-running AI agents and Cloudflare's discussion on "Shipping Agents with Cloudflare: Secure by Default," emphasizing security by design in the agentic future. GLM-5.2 is now a leading open-weights model, showcasing rapid AI advancements.

Practical takeaways include patching the Joomla JCE plugin immediately if applicable, developers scrutinizing all plugins for AI API key theft, and all users exercising extreme caution with mobile app downloads, sticking to official stores, and checking permissions.