IAM for AI agents: A Practical Enterprise Framework

The feed highlights active exploitation of critical vulnerabilities, cloud and identity abuse, malware campaigns, supply-chain compromises, cryptocurrency theft, and emerging risks from AI agents. Most urgent items include Citrix NetScaler zero-days, Oracle PeopleSoft RCE, SharePoint and RouterOS flaws, Roundcube SQL injection, WSO2 and Adobe Commerce vulnerabilities, and attacks leveraging compromised credentials or service principals. It also describes Android, macOS, Docker, and browser credential-stealing malware, as well as malicious GitHub Actions and domain-based ClickFix lures.