As enterprise security teams brace for the August 3 public preview of Microsoft’s Project Perception, the focus is shifting from general-purpose large language models to specialized, agentic security architectures. The upcoming release marks the first time the public will gain access to the company’s MAI-Cyber-1-Flash, a model designed exclusively for cybersecurity tasks, operating within the…
The acquisition of Oasis Security by Cyera for approximately $1 billion marks the first major M&A transaction to explicitly price agent identity as a billion-dollar security category. The deal, signed via a letter of intent on July 28, 2026, involves a mix of cash and stock, with roughly $700 million in cash. The $1 billion…
On July 27, Nvidia launched the Open Secure AI Alliance with 37 founding members — Microsoft, Adobe, CrowdStrike, Hugging Face, IBM, Cisco, Palo Alto Networks, Red Hat, and 29 others. Conspicuously absent: OpenAI, Google, Anthropic, and Meta. The four largest frontier AI labs declined to join a defensive coalition formed in direct response to a…
Home AI agent builders face a critical liability: the very safety guardrails engineered to protect users may now trigger enforcement actions. Under a proposed policy statement from the Federal Trade Commission, these protective measures could be legally reclassified as undisclosed objectives, potentially triggering enforcement actions for deceptive practices under Section 5 of the FTC Act.…
On July 28, 2026, the Model Context Protocol (MCP) underwent a fundamental architectural revision, removing protocol sessions and the Mcp-Session-Id header. This change renders the protocol layer stateless. While this simplifies the protocol, it effectively offloads the entire burden of state management and security enforcement onto individual implementations. The ecosystem, already struggling with basic security…
AI agent security is the practice of protecting AI agents, their users, data, tools, identities, communications, and environments from unauthorized behavior, manipulation, misuse, data exposure, and unsafe autonomous actions. It includes controls across the agent’s full lifecycle: design, deployment, operation, monitoring, and incident response.
Circle’s recent activity in Asia follows a deliberate, sequential expansion strategy. On July 14, 2026, Circle inked a deal with Japanese payments giant JCB. Just nine days later, on July 23, the USDC issuer announced a non-binding strategic memorandum of understanding (MOU) with the Kakao Group. This rapid succession of agreements indicates a coordinated effort…
Identity and Access Management (IAM) architectures were designed for a static era. They rely on human Single Sign-On (SSO) and predictable machine accounts. This model assumes that every action can be traced back to a known entity with a defined lifecycle. However, the rise of autonomous agents has rendered this assumption obsolete. IAM systems are…
Commercial model guardrails blocked forensic queries during the first documented autonomous-agent production breach. Hugging Face pivoted to an open-weight model on its own infrastructure — and the attackers faced no such constraint.
The Shift from Theory to Practice For years, the conversation around AI security felt like a theoretical exercise—a debate about what might happen when machines begin making autonomous decisions. That era has passed. We are now managing the practical realities of integrating autonomous systems into our digital infrastructure. When an AI agent is granted the…