Today’s briefing tracks active Gitea exploitation, global disruption at a medical-device supplier, exposed water-sector dependencies, unpatched Kaltura servers, industrial gateway risk and growing scrutiny of AI evaluation containment.