This week gave us the gift of some more React Server Components vulnerabilities (0:22) and further exploitation of the previously disclosed bugs by a variety of threat groups. There were also a long list of vulnerabilities disclosed by Microsoft, Adobe, and others, which we discuss in the context of how difficult vulnerability management is right now (09:55). Finally, we discuss CISA's warning about continued Russian targeting of US critical infrastructure (20:25).