Spyware via ads, kernel bugs on ARM, and GitHub's automation playbook

This week covers ad-tech spyware pipelines, a kernel exploit from an ISO download, and practical GitHub org hygiene.