Format
Policy
From CRA vulnerability reporting to state-level pricing bans, enforcement is arriving in waves across jurisdictions-and builders who miss the calendar pay the price.
◆ Priya Nair
Agents at Work
A new survey of 830 IT leaders shows direct financial impact has replaced productivity as the top AI success metric. But the budget tells a different story about where the money actually goes.
◆ Dana Ellison
Trust & Security
CVE-2026-82533 is the first confirmed vulnerability where an AI agent runtime sandbox was the direct attack surface. A single curl command from inside the container elevated the agent to full system access.
◆ Heath Callahan
Agents at Home
CRA Art. 14 reporting obligations activate tomorrow (Sep 11). Smart home AI companies must report actively exploited vulnerabilities within 24h. But CRA contains zero agent-specific provisions. ENISA portal has no API – manual submission only. Companies must self-assess without harmonized standards.
◆ Mila Cohen
Trust & Security
Cisco Talos identifies Sandworm, Qilin, and a credential theft cluster actively exploiting CVE-2026-20079. The management plane—the control layer for firewalls and VPN policies—is now the authentication gap's primary target.
◆ Heath Callahan
Commerce
The 'Know Your Agent' framework gives payment networks a way to verify agents. But consumers aren't asking 'who is this agent?' – they're asking 'should I let this agent act at all?'
◆ Tessa Vaughn
Policy
Florida's aider-and-abettor statute creates a fourth governance theory for AI agents – one that treats agents as instruments of human liability rather than subjects of technical regulation. No safe harbor, no new agency, just existing criminal law applied retroactively.
◆ Priya Nair
Commerce
A Zurich workshop brought W3C, GS1, Google, Shopify, OpenAI, and Mars together to address the 'last meter' problem – agents can complete transactions but still buy the wrong product without proper identity standards.
◆ Tessa Vaughn
Commerce
Three competing payment protocols commit to interoperability for AI agent commerce, but the framework arrives as high-level intent with no specs, no governance, and no timeline.
◆ Tessa Vaughn
Policy
OpenAI is backing four California AI safety bills while lobbying for national rules that would exempt startups and open-weights models, a strategic pivot that uses state-level mandates to build a federal framework favoring incumbents.
◆ Priya Nair
