Four Providers, 15 CVEs, Three Days — The Agent Identity Stack Is Under Coordinated Attack

Between October 2 and October 5, 2026, four distinct identity-layer vulnerabilities emerged, creating a concentrated cluster of security failures. The ZITADEL 10-CVE cluster, Zimbra CVE-2026-73570, Bouncy Castle CVE-2026-71885, and MCP…