This episode covers a dangerous new Linux zero-day called Dirty Frag that grants root access across major distros, a mass ShinyHunters attack defacing Canvas portals at hundreds of universities, and CISA's urgent four-day patching deadline for a critical Ivanti flaw already being exploited in the wild. Adrian also touches on volcanic trail running victories and a lightning-fast Clojure implementation in Go that boots in seven milliseconds.

Stories covered:

- New Linux 'Dirty Frag' zero-day gives root on all major distros (BleepingComputer) - https://www.bleepingcomputer.com/news/security/new-linux-dirty-frag-zero-day-with-poc-exploit-gives-root-privileges/

- Canvas login portals hacked in mass ShinyHunters extortion campaign (BleepingComputer) - https://www.bleepingcomputer.com/news/security/canvas-login-portals-hacked-in-mass-shinyhunters-extortion-campaign/

- CISA gives feds four days to patch Ivanti flaw exploited as zero-day (BleepingComputer) - https://www.bleepingcomputer.com/news/security/cisa-gives-feds-four-days-to-patch-ivanti-flaw-exploited-as-zero-day/

- 2026 Transvulcania Half Marathon Results: Volcanic Victory for Ruth Gitonga and Philemon Kiriago (iRunFar) - https://www.irunfar.com/2026-transvulcania-half-marathon-results

- Show HN: I made a Clojure-like language in Go, boots in 7ms (Hacker News) - https://github.com/nooga/let-go

- Zara data breach exposed personal information of 197,000 people (BleepingComputer) - https://www.bleepingcomputer.com/news/security/zara-data-breach-exposed-personal-information-of-197-000-people/