The global AI agent market is no longer a singular, borderless frontier. This week, three distinct developments across Asia-involving Manus, Enhans, and Huawei-demonstrate that the next phase of agentic deployment is being shaped by regional capital, sovereign infrastructure, and heavy-handed regulatory oversight. While US-based firms like Sierra and Cognition continue to command massive valuations, the…
A stack-based buffer overflow in Check Point’s Security Management Server login process allows an unauthenticated attacker to execute code as root on the machine that controls every firewall, policy, and rule across an enterprise Check Point deployment. CVE-2026-91843 carries a CVSS score of 9.8 out of 10. The overflow is triggered by a login request…
Google’s September 2026 release of Gemini 3.8 Live Extended Thinking marks a departure from the industry standard of opaque, black-box inference. By enabling the model to reason and speak simultaneously, Google has shifted the transparency needle from static, post-hoc disclosures to a dynamic, real-time visibility model. This capability allows the system to narrate its thought…
The simultaneous arrival of Huawei Cloud’s AI Cluster Service (AICS) and Google’s Managed Agent Harness this week reveals a deepening structural divide in how autonomous systems are being built. While both platforms aim to standardize enterprise agent deployment, they are emerging from fundamentally different architectural philosophies. Huawei’s announcement at HUAWEI CONNECT 2026 in Shanghai marks…
The security of the AI agent ecosystem has long relied on a simple, foundational assumption: if you pin a specific version of a plugin using a cryptographic hash, you are guaranteed to run that exact code. Plugin4Shell proves that this assumption is fundamentally broken. Discovered by the AIR Security research lab, Plugin4Shell is the first…
Azure Vulnerability Cluster Expands to Data and Financial Tiers Azure Database for PostgreSQL is vulnerable to CVE-2026-85878, an Improper Authorization flaw (CWE-285) carrying a CVSS score of 9.9. Simultaneously, Azure Billing is affected by CVE-2026-62874, an Insufficient Data Authenticity Verification issue (CWE-345) with a maximum CVSS score of 10.0. Both vulnerabilities were published September 18…
I spent the better part of this morning watching an AI agent try to organize my digital life. It felt less like a productivity hack and more like inviting a very eager, slightly clumsy intern to live inside my laptop. Meta released its standalone Muse app for macOS on September 17, 2026, and it is…
Manus AI is in discussions to raise $500 million at a $4 billion valuation, which would make it China’s most valuable autonomous agent startup. The round is not yet closed and terms remain subject to change, but the deal signals a shift in how the market prices AI agents. If finalized, this valuation would be…
Attackers can exploit CVE-2026-69843, a critical authentication bypass in Microsoft Fabric, without credentials or user interaction. This CVSS 10.0 vulnerability uses a network attack vector and features a scope-changed metric, allowing an adversary to cross security boundaries from the network directly into the analytics and data tier where OneLake stores enterprise data. The vulnerability is…
Alchemy’s integration of AgentCard with Mastercard Agent Pay establishes a dedicated identity layer for autonomous software. By provisioning each agent with a unique email address, phone number, stablecoin wallet, and tokenized payment credentials, Alchemy is attempting to treat AI agents as distinct, verifiable entities rather than mere extensions of a user’s existing account. This is…