Daily News - June 3rd

Today’s episode highlights immediate risks and broader security themes. We discuss a significant VS Code zero-day vulnerability that allows attackers to steal GitHub authentication tokens via malicious links, emphasizing the persistent threat of phishing. For web administrators, a critical privilege escalation flaw (CVE-2026-8206) in the Kirki WordPress plugin is actively being exploited to hijack admin accounts, underscoring the urgency of patching.Beyond specific vulnerabilities, we examine the dismantling of nine organized crime groups involved in illegal streaming, a reminder of the vast, interconnected nature of cybercrime. We also explore how legacy systems and historical code, like the Roku LT OS and Amiga Juggler source code, can present unexpected exposure points if their components are reused or connected in modern environments.The briefing also covers practical applications of AI and security automation. Google Cloud Tech's Agent Development Kit (ADK) is showcased for automating complex workflows such as SAP order-to-cash processes and streamlining project intake. We also touch on building long-running AI agents and John Hammond’s AI Cybersecurity Research Factory, demonstrating the potential for intelligent automation in both business and security operations.Key takeaways include the immediate need to patch VS Code and WordPress sites using the Kirki plugin, a call to review all potential exposure points including legacy systems and historical codebases, and an encouragement to evaluate AI tools like Google’s ADK for internal automation and client delivery.