This roundup covers a WhatsApp phishing campaign that uses fake business docs to drop remote-access malware on Windows PCs, Cisco’s move to secure AI agents by integrating WideField into Splunk, and why buying SaaS still beats building even with cheaper AI tools. It also highlights identity governance gaps for AI agents, Zoom Rooms’ expanded status dashboard, Flic Mic’s new wireless push-to-talk device, OpenAI’s Daybreak patch automation, and a terminal Markdown viewer called MdFried.

• WhatsApp phishing campaign tricks users into opening fake business/finance docs that install ManageEngine Endpoint Central, giving attackers full admin access to Windows PCs.
• Cisco is acquiring WideField Security to bring identity governance for both human and AI-agent identities into Splunk, aiming to track risky agent actions and every credential type.
• SaaS still beats building in-house for many tools despite cheaper AI-assisted development, because established products carry lower maintenance overhead than custom builds.
• Most current identity tools only track registered agents/managed platforms, missing the app-level visibility and real-time authorization needed for true AI agent governance.