Episode 139: August 18, 2026

Signal Check · Aug 18, 2026 · 6m

This episode digs into three critical vulnerabilities shaking up the security landscape: a Windows certificate authority flaw that turns standard users into domain admins, a GitHub Actions injection bug in Snowflake's repo that executes commands through issue forms, and an Android kernel exploit delivered via video calls on Unisoc-powered devices. Adrian breaks down how trusted infrastructure keeps becoming the attack surface we forgot to secure. Stories covered: - Certighost and the Privilege Hiding in Your Certificate Authority (BleepingComputer) -…