From AI models publishing live malware to critical Rails exploits and nation-state attacks on water infrastructure, today's stories prove that trust without verification is no longer an option.