Format
Trust & Security
CVE-2026-103956 granted super-admin access to any unauthenticated user through a hardcoded identity fallback in the agent orchestration layer. Three CVEs in one advisory, and a public proof-of-concept already exists.
◆ Heath Callahan
Infrastructure
The flaw is in the MCP protocol specification, not the vendor implementations. The protocol that won the standards war has a structural security gap — and the attack requires no AI model interaction.
◆ Blair Hayes
Trust & Security
The Dutch Institute for Vulnerability Disclosure was compromised by an autonomous AI agent exploiting two zero-day flaws in Zammad — the first publicly documented case of an agentic attack on a security organization.
◆ Heath Callahan
Money & Markets
FinCEN withdrew proposals for self-custody wallet reporting and mixer oversight while four agencies build statute-level rules converging on the same January 2027 deadline. The plumbing is going in; the surveillance is coming out.
◆ Nolan Pratt
Commerce
Shopping Assistant and Buy Direct collapse discovery and transaction into TikTok's algorithmic flow, powered by Google's Universal Commerce Protocol. But the merchant liability question every checkout surface is avoiding remains unanswered.
◆ Tessa Vaughn
Trust & Security
CVE-2026-21589 — a CVSS 9.3 unauthenticated file read flaw — hits eight Atlassian Data Center products. The tools agents rely on to build software are becoming the attack surface.
◆ Heath Callahan
Agents at Home
With eight days until the expected launch, Apple's silence on the HomePad's cost is the most telling detail in a market crowded with subscription-heavy rivals.
◆ Mila Cohen
Policy
Beijing's world-first agent regulatory framework treats autonomous systems as industrial policy, not a safety problem. The contrast with the US containment-first approach is reshaping the global competitive landscape.
◆ Priya Nair
Money & Markets
The payments giant's 100-country stablecoin card expansion and Henri Stern hire signal a shift from experimental crypto to core infrastructure.
◆ Blair Hayes
Money & Markets
Chainalysis data reveals a high-velocity parallel payment rail with 43-fold wallet growth, adoption surging after the social credit system expansion – and the US Treasury's foreign-issuer restrictions designed to address exactly this kind of unregulated flow.
◆ Nolan Pratt
