Reporting from Vegas: Networking, AI, and good boys

**Executive summary:** Cisco Talos’ weekly Threat Source newsletter summarizes multiple active security issues including malware detections (with SHA256/MD5 IOCs), phishing-as-a-service expansion (Kali365), GitHub OAuth token theft via malicious VS Code extensions, a supply-chain NPM compromise affecting Red Hat packages, and a widespread HTTP/2 denial exploit; the content is an aggregated situational update rather than a single in-depth incident analysis.