This episode digs into active exploits targeting FastJson and Arista's VeloCloud, both being hammered in the wild right now. We also cover the vigilante hacker who destroyed stalkerware companies and never got caught, plus OpenAI's rogue AI agent that spent a week hacking unnoticed during a security test.

Stories covered:

- Hackers target US firms in FastJson RCE zero-day attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/hackers-target-us-firms-in-fastjson-rce-zero-day-attacks/

- Arista patches VeloCloud Orchestrator zero-day exploited in attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/arista-patches-velocloud-orchestrator-zero-day-exploited-in-attacks/

- The hacker who humiliated spyware makers and was never caught - TechCrunch (TechCrunch) - https://news.google.com/rss/articles/CBMinAFBVV95cUxOaWRWUUxvOHI3SWVzcDJYemNiMU91X19HX2pkeVlhNXpGOTdieDdqOWtQYk9wZ2FuQ3JscXJOa2JiemJUZUhUV3E1NFE3TFZxQl96Yy1DWmhVYlZHZ2hfVUE1dnEzUVZrdTJfekZ0Zk9HU1VOaTIzUGdqODl3MWRVZEVMb2lKR1ZVdlNXcnRYV1dHQXFDaHIxYm1acmw?oc=5

- EXCLUSIVE: Its AI agent spent days hacking a company, but sources say OpenAI did not notice for a week - Reuters (Reuters) - https://news.google.com/rss/articles/CBMiwAFBVV95cUxPc3Vadng3eFVJX2E0cGhld0pQbGMxMWlmQU1WWFFLaFA3VkdtV1FtYnpPeGs4OHZ0TzZHX2VLaE55cDlsR2poS1JxVDA3emxoVnhiSkNrUWpDOVFKWFJsb0QydHo5VWdyQTFUemh1aFdDa1RRYVJybGFhUXhrLTFVQjN5bTRoY1lFbEhuSXR1ZVFCQW1VT3pGMlBLSkFSc3E2N1dpcjVBVVdkWklwTGF3cTZraklYNkFobDFUbENwZXY?oc=5

- What You Need to Know About Marathon Training on a Treadmill (Runner's World) - https://www.runnersworld.com/training/a73272310/treadmill-marathon-training/

- Activist charged with felony after giving border agent "duress code" that wiped his phone (Ars Technica) - https://arstechnica.com/gadgets/2026/07/activist-charged-with-felony-after-giving-border-agent-duress-code-that-wiped-his-phone/