The week's defining risk lay in systems that administer other systems: VPNs, security management, builds, backup, SharePoint, and industrial suppliers. Late KEV additions for SharePoint and MikroTik sharpen the need to investigate past access as well as patch.