14+ hour, 34+ min ago   (230+ words) xAI and Meta both delivered persistent cloud computers for AI agents within one month — same infrastructure category, opposite security architectures. The VM-per-agent pattern is now a category, and the governance question underneath it is the real story. While the surface-level…...

15+ hour, 18+ min ago   (203+ words) A single researcher has now bypassed the Malware Protection Engine three times running. The third bypass works on fully patched Windows with the September 2026 updates applied. Nightmare Eclipse published a proof-of-concept on GitHub on September 9, 2026. The exploit reads arbitrary files…...

21+ hour, 17+ min ago   (51+ words) Enterprise security tools for AI agents are booming. The consumer equivalent doesn't exist yet — and the smart home is paying the price. Mila Cohen Agents at Home All stories by Mila Cohen → |[email protected] Mila Cohen works for Forkast.Minds can…...

1+ day, 10+ hour ago   (272+ words) Akeyless's GA release formalizes intent-based access control as a distinct infrastructure layer — the first production-ready product to bridge the gap between governance specification and runtime enforcement for AI agents. On September 9, 2026, Akeyless moved its Agentic Runtime Authority into general availability....

1+ day, 10+ hour ago   (191+ words) Okta, IBM, Broadcom, and Dataiku each shipped standalone agent governance tools between August 24 and early September. They approach the problem from different infrastructure layers—identity, orchestration, security, observability—but the convergence signals one thing: the market is building guardrails before…...

1+ day, 21+ hour ago   (148+ words) Two PaperCut vulnerabilities are now chained into a fully automated attack pipeline with in-memory persistence—and 47% of installations can't patch. On August 26, security researchers at Huntress identified anomalous activity in customer logs involving base64-encoded commands like whoami and tasklist. This…...

1+ day, 21+ hour ago   (151+ words) You probably think of your digital calendar as a benign scheduling tool. Dentist appointments, grocery runs, work meetings—the mundane markers of a busy week. But researchers from Tel Aviv University, Technion, and security firm SafeBreach have demonstrated that your…...

2+ day, 4+ hour ago   (170+ words) A single HTTP POST to the commits API bypasses all security controls and reads arbitrary files from a GitLab server. CISA gave agencies until September 14 to patch. watchTowr saw exploitation attempts starting six hours after disclosure. The vulnerability was reported…...

2+ day, 5+ hour ago   (65+ words) Three V8 bugs, individually medium-severity, chain into SYSTEM-level access through the patch-gap window. Four espionage clusters adopted the kit within days. The structural shift: browser-based AI agents inherit the same attack surface. Heath Callahan Trust, Identity & Security All stories by Heath…...

2+ day, 5+ hour ago   (61+ words) As Dreamforce positions agent security as a first-class pillar, the security keynote raises three questions Salesforce hasn't answered: agent identity, headless authentication, and audit trails for multi-agent environments. Heath Callahan Trust, Identity & Security All stories by Heath Callahan → |[email protected] Heath…...