Analysis – Page 63

Trust & Security

Three Patches, Zero Progress: ShieldCrash Exposes the Endpoint-Protection Plane as Microsoft’s Latest Attack Surface

Nightmare Eclipse published a proof-of-concept on GitHub on September 9, 2026. The exploit reads arbitrary files as SYSTEM on fully patched Windows 10, Windows 11, and Windows Server systems running the September 2026 security updates. It is the third consecutive bypass of the same component—the Microsoft Malware Protection Engine—in four months. The sequence started in […]

◆ Heath CallahanSep 13

Agents at Home

AI Agent Defender: What Consumer Tools Actually Exist to Protect Your Smart Home’s AI Agents

Enterprise security tools for AI agents are booming. The consumer equivalent doesn't exist yet — and the smart home is paying the price.

◆ Mila CohenSep 13

Trust & Security

The Chain That Opened the Crisis: How SonicWall SMA1000’s First Zero-Day Turned VPN Appliances Into MFA Harvesting Machines

CVE-2026-15409 chained SSRF and code injection to achieve root on SMA1000 appliances, stealing TOTP MFA seeds and turning the VPN gateway into a persistent surveillance platform. CISA flagged it for ransomware exploitation. We covered the second chain but never the first — this is the origin story.

◆ Heath CallahanSep 13

Money & Markets

Two Digital Money Models Are Going Live the Same Week. Only One Is Ready.

The BRICS summit is debating CBDC interoperability while Circle launches production-ready stablecoin infrastructure. The timing reveals which approach actually ships.

◆ Nolan PrattSep 12

Agents at Work

Dataiku Ships Standalone Agent Governance With a Bet That Cross-Platform Beats Native

The company's Agent Management product connects to nine platforms — including Salesforce Agentforce, Microsoft Copilot Studio, and AWS Bedrock — and does not require the Dataiku platform. Whether enterprises want another governance layer is the open question.

◆ Dana EllisonSep 12

Policy

California Just Wrote the First Legal Rulebook for How AI Agents Must Behave Around Children

Adam's Law targets AI relational behavior — sentience claims, simulated romance, emotional manipulation — creating a new compliance category with a private right of action for families.

◆ Priya NairSep 12

Agents at Home

The Hidden Cost of Securing Your Smart Home’s AI Agent Chain

Multi-agent smart home systems cost 5-10x more to build than single-agent tools. The protocol powering them executes OS commands by design. And regulators haven't caught up.

◆ Mila CohenSep 12

Infrastructure

Intent-Based Access Control: Runtime Authority as Infrastructure

Akeyless's GA release formalizes intent-based access control as a distinct infrastructure layer — the first production-ready product to bridge the gap between governance specification and runtime enforcement for AI agents.

◆ Blair HayesSep 12

Money & Markets

Block Wants to Stop Acting Like a Giant Wallet and Start Acting Like a Bank

The Cash App parent filed for an OCC national trust charter to custody bitcoin and stablecoins under federal preemption – joining a charter wave that now has three distinct lanes.

◆ Nolan PrattSep 12

Agents at Work

The Agent Governance Stack Is Forming: Four Products, Two Weeks, One Pattern

Okta, IBM, Broadcom, and Dataiku each shipped standalone agent governance tools between August 24 and early September. They approach the problem from different infrastructure layers—identity, orchestration, security, observability—but the convergence signals one thing: the market is building guardrails before agents have standardized.

◆ Dana EllisonSep 12