Two critical PHP flaws meet forgotten systems, a 16-year-old Broadcom Wi-Fi bug, AI agents attacking 1,200 sites for about $5,000, and certificate-authority keys that were practically guessable. This week’s lesson: understand the real-world risk behind the headline.