Daily News - June 25th

Today's episode highlights severe vulnerabilities, including six new CVEs in Curl—a widely used component—and a Cisco SD-WAN zero-day actively exploited for root access. We detail how a malicious Edge extension, 'Edgecution,' bypassed browser sandboxes for ransomware, emphasizing the serious threat posed by extensions. CISA's urgent warnings on actively exploited, max-severity flaws in Ubiquiti UniFi OS and Lantronix devices underscore the immediate need for patching.On a positive note, we cover Operation Endgame, a significant international disruption of Amadey and StealC malware infrastructure. In AI, we discuss Google Cloud Tech's new agentic updates, pushing AI agents toward greater autonomy, alongside Anthropic's accusation against Alibaba for illicitly extracting Claude AI model capabilities, highlighting critical IP and security challenges.The key takeaways for listeners include reviewing exposure to Curl, Cisco, and Ubiquiti vulnerabilities, evaluating new agentic AI tools with a focus on data privacy, and bolstering browser security through updates, careful extension management, and user training.