7 articles tagged
Cognition's 21 August 2026 release streams integrated terminal activity and local user edits to third-party ACP agents by default, with no matching control in the documented admin settings tables.
Machine identities outnumber humans 109 to 1 and 12% of organisations have given AI agents privileged access to core systems. Okta's Permiso deal shows where agent identity governance is heading.
Oracle's largest-ever Critical Patch Update landed 1,400+ patches, ten CVSS 10.0 flaws and a PeopleSoft zero-day already exploited. How to triage by exposure before the October 2026 CPU.
The post-quantum standards are final, browsers already negotiate ML-KEM by default, and FIPS 140-2 validations expire on 21 September 2026. Here is a practical crypto-agility roadmap for enterprises, from cryptographic
Prompt injection in agentic browsers like Atlas and Comet has no reliable fix, and Atlas stops working on 9 August 2026. Here is a rollout decision and 7 controls, from isolation to DLP, for security teams.
JADEPUFFER exploited a critical Langflow flaw (CVE-2025-3248) and used an LLM to chain reconnaissance, theft and database extortion with no human operator. A breakdown of the attack and a 2026 defense checklist
Apple rebuilt Siri on a 1.2-trillion-parameter Google Gemini model. For CTOs that raises real questions about data exposure, vendor dependency, antitrust risk and device control. Here are the seven enterprise questions
