1 rich Libsyn https://www.libsyn.com 90 600 WP2Shell WordPress RCE feeding frenzy, AI agent breaches Hugging Face, Killin hits Palo Alto VPN flaw &amp;nbsp; This episode covers five major incidents: a chained WordPress exploit dubbed WP2Shell (CVE-2026-6330 and CVE-2026-6137) enabling anonymous remote code execution on stock installs, now seeing tens of thousands of Internet-wide attempts, backdoor admin accounts, and web shell payloads despite forced auto-updates to 6.9.5 and 7.0.2. &amp;nbsp; Hugging Face’s disclosure that an autonomous AI agent breached its production infrastructure via a malicious dataset, stole limited internal datasets and credentials, and forced responders to work around restrictive model guardrails. &amp;nbsp; Arctic Wolf’s report that the Killin ransomware gang is exploiting Palo Alto PAN-OS GlobalProtect auth bypass CVE-2026-0257 for domain-wide encryption; and healthcare supply-chain fallout including Craneware file exfiltration. &amp;nbsp; EY client tax-data exposure via a third-party platform. &amp;nbsp; 00:00&amp;nbsp;Top Stories Teaser 00:28&amp;nbsp;WP2Shell WordPress Frenzy 02:58&amp;nbsp;AI Agent Hacks Hugging Face 05:16&amp;nbsp;Killin Hits Palo Alto VPNs 07:33&amp;nbsp;Craneware Healthcare Breach 09:15&amp;nbsp;EY Third Party Data Leak 10:47&amp;nbsp;Wrap Up and Sign Off Cybersecurity Today https://www.technewsday.ca <iframe title="Libsyn Player" style="border: none" src="//html5-player.libsyn.com/embed/episode/id/42175870/height/90/theme/custom/thumbnail/yes/direction/forward/render-playlist/no/custom-color/88AA3C/" height="90" width="600" scrolling="no" allowfullscreen webkitallowfullscreen mozallowfullscreen oallowfullscreen msallowfullscreen></iframe> https://assets.libsyn.com/secure/content/204353685