Microsoft uncovers a backdoor using OpenAI’s API, Android patches a critical RCE, Zscaler buys SPLX for AI lifecycle security, Cisco updates AI networking, Graylog adds MCP-aware SOC tools, and data shows most sites are unprepared for AI-agent traffic.