The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

The document is a roundup of major cybersecurity developments reported on October 8–10, 2026. Key incidents include credential theft through malicious GitHub Actions workflows and Firefox extensions, active exploitation of AhsayCBS and ProFTPD vulnerabilities, a pre-authentication root-level AnyDesk Linux exploit, a critical Citrix NetScaler flaw, iOS exploit-kit enhancements, China- and Russia-linked campaigns, phishing and AI-assisted attacks, and software supply-chain compromises. Several items involve active exploitation, publicly demonstrated exploits, or sensitive-data theft.