CrowdStrike Ships SPIFFE-Based Continuous Identity for AI Agents, Maps OAuth Gap
The $740M SGNL acquisition now powers cryptographically verifiable agent identities — but the industry still lacks a standard way to express who an agent is acting for.
-
-
JADEPUFFER: First Fully Autonomous Ransomware Executes End-to-End Extortion With No Human Operator
Sysdig TRT documents JADEPUFFER, the first fully autonomous ransomware operation driven by an LLM agent that exploited CVE-2025-3248 in Langflow to encrypt 1,300+ database records.
-
Unit 42 Exposes First AI Agent Supply Chain Attack: Malicious Skills Hijack Authority, Execute Solana Pump-and-Dump
Palo Alto Networks researchers document five malicious skills that passed VirusTotal and ClawScan on OpenClaw’s ClawHub marketplace, including the first weaponized AI agent network for cryptocurrency fraud.
-
Google’s UCP Wants to Own the Checkout Layer for Agent Commerce — and the Gatekeeping Comes Free
Universal Commerce Protocol, co-developed with Shopify, preserves the merchant-of-record model and runs through Google Merchant Center. 60+ partners joined the Tech Council. But the 14% consumer trust ceiling applies to this rail too.
-
Three Rails, One Problem: Card Networks, Crypto Protocols, and Cloud Giants Are All Fighting for Agent Payment Infrastructure — But None Can Buy Consumer Trust
Visa, Mastercard, x402, MPP, Google UCP, AWS AgentCore — three competing architectures now in production for agent payments. The structural question: they are fighting over plumbing, not commerce.
-
Visa Bets It Can Build the Trust Layer for a Market That Doesn’t Trust AI to Buy Anything Yet
Visa is positioning itself as the central nervous system for the nascent agentic commerce economy. Whether this platform becomes the standard for autonomous commerce or remains a sophisticated solution in search of a problem depends on whether consumers can be convinced to relinquish control.
-
Mastercard Built the Rails for Agent-to-Agent Payments. Now It Needs the Traffic.
Agent Pay for Machines is the first infrastructure designed for machine-to-machine commerce at scale. But there’s no public audit of actual agent transaction volume — and the gap between rails and riders is the story.
-
FIDO Alliance Bets That Architecture Can Do What Regulation Hasn’t
Google, Mastercard, and Coinbase are collaborating through standards bodies to define the rules of AI agent commerce before governments can. But technical security and consumer trust are not the same thing.
-
ClickUp Cut 22% and Promised $1M Salary Bands. The Survivor Reward Model Is Here.
ClickUp deployed 3,000 AI agents and restructured around a model where fewer employees do more work for dramatically higher pay. Industry data suggests most companies can’t make it pay.
-
Heavy AI Adopters Grew Headcount 10%. The Rest Saw Nothing. The Workforce Is Splitting in Two.
A new study of 21,599 U.S. firms finds that companies spending the most on AI hired more people, including at the entry level. But the gains stopped there.