• Rootkits found in more than 400 ArchLinux User Repository packages. • The US government requests Anthropic to remove Mythos and Fable. • CISA responds to AI-driven attacks with new patching requirements. • NPM to switch to more secure install defaults. Will it help? • Our listeners react to last week's PHP commentary. • June shows that AI has arrived for vulnerability discovery.