A new WhatsApp phishing wave is delivering obfuscated VBScript files disguised as business and finance docs. Once a user opens one on Windows, it installs ManageEngine Endpoint Central and connects to attacker-controlled servers. That gives hackers full admin access to the PC, letting them run commands, steal data or drop more malware. Cisco is buying WideField Security to fold its identity governance tech into Splunk. The move ties human and non-human identities—think AI agents, sessions, cloud workloads—into a single telemetry view. Security teams will see approved AI agents making risky calls and track every credential, from service accounts to delegated tokens. Even as LLMs shrink dev costs, there’s still a buying zone where SaaS beats in-house builds on price and upkeep. The “zone of viability” spans products with established features and support—areas where rolling your own adds more maintenance headaches than savings. At Identiverse 2026, speakers warned that most tools only catch registered agents or managed platforms. True AI agent governance needs app-level visibility and real-time authorization across every access path and credential. On the lighter side, Zoom Rooms now report fine-grained statuses—available, offline, in a meeting or under construction—right in the dashboard. Flic Mic, a wireless push-to-talk button for AI assistants and home automation, goes on sale with no subscription, runs on a coin cell and offers an open API. And OpenAI’s Daybreak expands into patch automation with Codex Security scanning over 30 million commits, plus a new GPT-5.5-Cyber model limited to vetted defenders. Finally, MdFried debuts as a terminal Markdown viewer with real text-size headers, image previews, Mermaid diagrams and PDF support.