Executive signal: Anthropic AI copyright landmark: $1.5B settlement approved with 91% author/publisher opt-in rate — establishes training-on-books as fair use. CISA adds 4 new exploited vulnerabilities to KEV; WordPress and DD-WRT critical. LG bans residential proxy SDKs from webOS apps — 42% of apps previously included them. Prediction markets explode during World Cup: billions traded, millions of new users, casino revenues at record highs.

Priority Items

Market / Industry Watch

  • Prediction Markets: World Cup 2026 driving record volumes. Kalshi/Polymarket combined billions in notional value; millions of new traders. Washington state considering ban.
  • Tribal Casinos: Record revenues reported; sports betting dips vs prediction markets. Land-based gaming remains strong baseline.
  • Australian Gambling Harm: 3.3M Australians experiencing gambling-related harm; regulatory pressure on advertising.
  • Kazakhstan Online Betting: Digital firms now eclipse land-based rivals in growth rate.

AI / Cloud / Cybersecurity Watch

  • WordPress Vulnerabilities: CVE-2026-63030 and CVE-2026-60137 in CISA KEV with active exploits. Patch urgently.
  • DD-WRT Buffer Overflow: CVE-2021-27137 now actively exploited after 5 years dormant. Check deployments.
  • Langflow Code Injection: CVE-2026-0770 affects AI/ML automation flow platform. Patch immediately if in stack.
  • Azure/Cloud: No breaking changes this week; AZ-104 certification stable.

Follow-ups for Sam

  • AI/Gaming landscape: Prediction markets are material revenue headwind for traditional sports betting and tribal gaming.
  • Anthropic settlement: Landmark precedent for training-on-books fair-use doctrine. May affect AI tooling decisions.
  • IoT audit: LG proxy SDK scandal is canary for broader IoT trust issues. Scan smart speakers and other devices.