The Week in Five: five security stories, and what to ask your team

Five stories from the security week, explained for people who do not work in security. What happened, what it costs you, what control was missing, and one question you can forward to your own team. Security week of 2026-08-17 to 2026-08-23. Chapters 0:00 The price of a missing control 0:41 The Build Machine 1:42 The Keys Nobody Changed 2:43 Nothing To Patch 3:44 The Prompt Replaced The Specialist 4:46 The Door They Stopped Using 5:46 The five questions Sources Downloads, One Package, Ten Years (2026-08-20) https://blog.rust-lang.org/2026/08/20... https://www.wiz.io/blog/rust-supply-c... Cloud Keys In Public, Still Working (2026-08-21) https://trufflesecurity.com/blog/leak... https://www.bleepingcomputer.com/news... Maximum Severity, Nothing To Install (2026-08-21) https://www.helpnetsecurity.com/2026/... https://www.cve.org/CVERecord?id=CVE-... Five Agencies, One Joint Warning (2026-08-19) https://www.cisa.gov/news-events/cybe... https://www.helpnetsecurity.com/2026/... Ten Thousand Dollars, Off The Shelf (2026-08-21) https://www.securityweek.com/new-phis... https://www.theregister.com/cyber-cri... Framing anchor, correctly dated to January 2026 https://www.apra.gov.au/news-and-publ... The five questions in this episode are also the week's questions on QuizNoir: https://quiz.threatnoir.com More at https://threatnoir.com AI-assisted script and synthetic narration. Editor reviewed. Every figure on screen traces to a source listed above.