Tag
Cognition's 21 August 2026 release streams integrated terminal activity and local user edits to third-party ACP agents by default, with no matching control in the documented admin settings tables.
Manu Shukla 
Machine identities outnumber humans 109 to 1 and 12% of organisations have given AI agents privileged access to core systems. Okta's Permiso deal shows where agent identity governance is heading.
Manu Shukla 
Oracle's largest-ever Critical Patch Update landed 1,400+ patches, ten CVSS 10.0 flaws and a PeopleSoft zero-day already exploited. How to triage by exposure before the October 2026 CPU.
Manu Shukla 
The post-quantum standards are final, browsers negotiate ML-KEM by default and FIPS 140-2 went historical on 21 September 2026. A crypto-agility roadmap for enterprises, with the CNSA 2.0 dates.
Manu Shukla 
Prompt injection in agentic browsers like Atlas and Comet has no reliable fix, and Atlas stops working on 9 August 2026. Here is a rollout decision and 7 controls, from isolation to DLP, for security teams.
Manu Shukla 
JADEPUFFER exploited a critical Langflow flaw (CVE-2025-3248) and used an LLM to chain reconnaissance, theft and database extortion with no human operator. A breakdown of the attack and a 2026 defense checklist
Manu Shukla 
Apple rebuilt Siri on a 1.2-trillion-parameter Google Gemini model. For CTOs that raises real questions about data exposure, vendor dependency, antitrust risk and device control. Here are the seven enterprise questions
Manu Shukla 