Wednesday morning, the keynote will be over, and there will be nothing to unbox. Apple’s “Welcome Home” event lands Tuesday, Oct. 13, at 9 a.m. ET in Tribeca – date, title, and venue on Apple’s own confirmation – but the device itself reportedly ships in mid-November [claim: Bloomberg’s Mark Gurman, via CNET]. What arrives in…
An agent control plane is the layer that deploys, governs and monitors an organization’s AI agents. Learn how it differs from agent infrastructure and MCP.
KPMG says 62% of large US enterprises are building or deploying agents. A 150-deployment audit finds the strongest systems stay bounded, human-governed, and poorly measured.
At SecTor 2026 in Toronto, researchers Tamir Ishay Sharbat and Lana Salameh of Zenity Labs detailed a flaw they termed AgentCorruption. The attack relies on SSRF, a technique where an application is manipulated into making unauthorized requests to internal resources. In this case, a single prompt to a public-facing AWS Bedrock AgentCore agent allowed an…
On October 6, SonicWall issued advisory SNWLID-2026-0017. The bulletin stated plainly: “There is currently no evidence any of the vulnerabilities addressed in this release are being exploited in the wild.” Within 24 hours, the Previdian honeypot network detected exploitation attempts targeting the same advisory’s highest-severity flaw. Ryan Dewhurst, founder of Previdian, confirmed the finding to…
Splunk’s cluster-coordination sidecar. Loom’s agent control plane. ClearPass’s network admission layer. SonicWall’s remote-access edge. Four vendors, four architectures, one missing check: in every case the component that arbitrates trust shipped without asking who was asking. The class has a name. Missing authentication for a critical function (CWE-306) covers products that perform no authentication for functionality…
A pre-authentication vulnerability in the SonicWall SMA1000 series allows an unauthenticated request to turn the device into an unintended proxy for remote attackers. According to the SonicWall PSIRT advisory SNWLID-2026-0017, this mechanism, known as a confused deputy, permits the appliance to reach internal functionality and perform unauthorized operations without requiring any credentials. The SMA1000 line…
Securing AI agents has hit a wall. As enterprises move from simple chatbots to autonomous agents capable of executing complex tasks, the industry is discovering that traditional perimeter defenses—gateways and sidecars—are effectively blind to what happens inside the model’s own “brain.” The real risk isn’t just the output; it is the internal logic that leads…
The evaluation stack that enterprise buyers rely on to vet large language models just underwent its first independent stress test. For years, procurement teams have navigated a landscape of vendor-provided benchmarks and leaderboard Elo ratings-a dynamic explored in our analysis of shifting industry economics and the implications of open-weight proliferation. Now, the Arena Alignment Index,…
Execution verification is the use of cryptographic or infrastructure-level mechanisms to prove that an AI agent actually performed the actions its systems record, producing cryptographically verifiable evidence of what was done and what state changed. It is distinct from permission management and policy enforcement, which decide what an agent may do before it acts; execution…