The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

The feed reports multiple significant cybersecurity developments, including exploited vulnerabilities, active credential theft and supply-chain compromises, malware campaigns, phishing infrastructure, and state-sponsored intrusions. Notable items include a working pre-authentication AnyDesk Linux exploit enabling root access, AhsayCBS flaws exploited to deploy web shells and XMRig miners, five vulnerabilities added to CISA’s KEV catalog following Flax Typhoon exploitation, malicious GitHub Actions workflows harvesting credentials, and compromised npm and browser-extension packages targeting CI