This week in cyber, attackers turned Steam games into crypto-stealing malware, criminals used fake VPN downloads and live chat support to steal credentials in real time, and AI agents are suddenly becoming one of the biggest new enterprise security headaches. On top of that, critical flaws in Wing FTP, Veeam, and Linux AppArmor are reminding defenders that patching and identity protection still decide who wins.