Today’s BCG brief tracks exploited flaws in RMM, Defender, Oracle EBS, Cisco SD-WAN, and PeopleSoft, plus Azure CLI password spraying, PRC research targeting, Turla tooling, AI-agent risk, and a major Aflac Japan breach.