Today’s episode highlights immediate risks and broader security

themes. We discuss a significant VS Code zero-day vulnerability that

allows attackers to steal GitHub authentication tokens via malicious

links, emphasizing the persistent threat of phishing. For web

administrators, a critical privilege escalation flaw (CVE-2026-8206)

in the Kirki WordPress plugin is actively being exploited to hijack

admin accounts, underscoring the urgency of patching.

Beyond specific vulnerabilities, we examine the dismantling of nine

organized crime groups involved in illegal streaming, a reminder of

the vast, interconnected nature of cybercrime. We also explore how

legacy systems and historical code, like the Roku LT OS and Amiga

Juggler source code, can present unexpected exposure points if their

components are reused or connected in modern environments.

The briefing also covers practical applications of AI and security

automation. Google Cloud Tech's Agent Development Kit (ADK) is

showcased for automating complex workflows such as SAP order-to-cash

processes and streamlining project intake. We also touch on building

long-running AI agents and John Hammond’s AI Cybersecurity Research

Factory, demonstrating the potential for intelligent automation in

both business and security operations.

Key takeaways include the immediate need to patch VS Code and

WordPress sites using the Kirki plugin, a call to review all potential

exposure points including legacy systems and historical codebases, and

an encouragement to evaluate AI tools like Google’s ADK for internal

automation and client delivery.