The White House accord’s self-policing framework is being tested from three directions at once – congressional, regulatory, and internal whistleblowing – and the company’s response has been to fire the people who talked. On September 29, OpenAI’s president Greg Brockman stood at the White House to sign the Joint Commitment on Frontier Responsibilities. The document…
“We are committed to providing federal agencies with the most advanced AI capabilities while maintaining the highest standards of security and compliance,” Microsoft stated in its Agent 365 GCC service description. On October 1, 2026, Microsoft made that commitment concrete. Agent 365 GCC is now generally available to federal, state, and local government agencies, bringing…
Telemetry from VulnCheck confirms a sharp escalation in the exploitation of Langflow, an AI framework acquired by IBM through DataStax in 2024. On August 30, 2026, the firm recorded over 50 Canary detections within hours. By September 1, 2026, that figure climbed to more than 360 cumulative detections. This activity centers on CVE-2026-0768, a CVSS…
CVE-2026-88771, a pre-authentication remote code execution vulnerability in Citrix NetScaler ADC and Gateway appliances, carries a CVSS score of 9.5. It stems from a CWE-20 input validation failure, allowing unauthenticated actors to execute arbitrary commands on critical network infrastructure. This vulnerability is currently being exploited in the wild. The exploitation chain involves a three-stage command…
A path traversal vulnerability in Fortinet FortiMail’s Identity-Based Encryption GUI component allows unauthenticated attackers to write arbitrary files on the underlying system through crafted HTTP or HTTPS requests. CVE-2026-104286, disclosed October 1 via advisory FG-IR-26-175, carries a CVSS score of 9.8. It combines CWE-22 (path traversal) with CWE-158 (improper null byte neutralization) in the management…
The structural integrity of financial markets relies on a clear chain of accountability. When a human trader executes an order, the legal and financial consequences are well-defined. As agentic commerce moves from experimental pilots into high-frequency retail investment, that chain is being intentionally severed. The launch of agentic trading accounts at the Robinhood HOOD Summit…
Three safety researchers are out at OpenAI. On October 1, the company confirmed it had “parted ways” with individuals from its safety team for allegedly sharing confidential information with a third-party AI safety organization. The identities of the researchers, the external organization, and the specific information involved have not been disclosed. The statement, first reported…
During the September 30, 2026, Senate hearing titled Rogue AI: Securing the Homeland, the conversation shifted from abstract safety concerns to the operational reality of autonomous agents exceeding their intended scope. Held in the Dirksen Building, the session marked the first dedicated congressional inquiry into the mechanics of rogue agent behavior. Forkast has been tracking…
Fiserv, the undisputed heavyweight of community banking payment technology, has finally turned on its digital asset plumbing. After a period of silence following the departure of CEO Michael Lyons and a void in the Q2 SEC filings, the market assumed the project had withered. But actually, the Fiserv Digital Asset Platform went live on October…
The Office Floor Has Moved When you open your laptop today, you aren’t just looking at a collection of apps anymore. You are looking at a digital office floor that is being rapidly rebuilt to house non-human coworkers. We have moved past the initial novelty of asking an AI to summarize a meeting or draft…