Docker introduces OCI-based Kits to package agents and their guardrails

The feed highlights a malicious campaign distributing fake desktop applications for major payroll and HR services. Because the legitimate platforms are browser-based, the installers are fraudulent and deploy ScreenConnect remote access software configured for covert attacker control, potentially enabling access to payroll systems, credentials, sensitive employee data, and company funds. The remaining articles primarily cover AI-agent governance, cloud security, threat hunting, and security products without reporting specific vulnerabilities.