The SQL Injection in Email Parsing The vulnerability identified as CVE-2026-76461 is a failure in the email parsing logic of Cisco Secure Email Gateway appliances. Not the web management interface – the core engine that processes inbound mail. Cisco’s advisory describes a CWE-89 SQL injection that allows an unauthenticated, remote attacker to execute arbitrary commands…
A working agent demo might take you an afternoon. Your competitor can build the same one just as fast. The competitive advantage shows up after the demo, in whether people trust that agent enough to keep using it. That framing comes from Temporal itself, and it is the clearest explanation for why the company just…
The Treasury circuit breaker is a financial panic button currently missing its manual. Tucked into the 635-page CLARITY Act, this provision empowers the Secretary of the Treasury to throttle stablecoin rewards if community banks experience a substantial exodus of deposits. It is a legislative attempt to solve a problem that the banking lobby insists is…
Runtime authority is the enforcement layer within the agent infrastructure stack that validates an AI agent’s identity, intent, and specific actions in real time during execution — transforming governance policies into operational controls that function between the agent and the systems it accesses.
Russian military forces continue to acquire advanced AI chips despite stringent U.S. export controls, exposing a fundamental disconnect between administrative policy and operational reality. This persistent diversion has prompted Americans for Responsible Innovation (ARI) to urge House and Senate Armed Services leaders to overhaul the oversight framework within the FY2027 National Defense Authorization Act (NDAA).…
Most enterprise agent governance ships inside the platform that built the agent. Salesforce has its Einstein Trust Layer. Microsoft has Agent 365 paired with Purview. Each one is strong inside its own walls and silent outside them. Dataiku is betting there is room for something that sits above all of those walls at once. Dataiku…
The Sovereign Alternative When the Globe and Mail reported September 11 that Cohere is in advanced talks to raise between $2 billion and $3 billion at a $20 billion valuation, the headline numbers were striking enough: a nearly threefold jump from the company’s $7 billion valuation just twelve months prior, and the largest funding round…
A single HTTP POST request to the /api/v4/projects/{id}/repository/commits/ endpoint is sufficient to bypass security controls and read arbitrary files from a GitLab server. This path traversal vulnerability, designated CVE-2026-85706, carries a CVSS score of 10.0. It stems from a failure in path confinement combined with a complete lack of authentication enforcement. To trigger the exploit,…
Three days before Anthropic published its September 2026 threat intelligence report, the CISA, FBI, and NSA issued a joint advisory (AA26-251A) accusing six Chinese AI companies of industrial-scale distillation against US AI firms. Anthropic’s report, published September 10, is the evidentiary backbone of that accusation. The numbers are the story: approximately 200 million exchanges across…
The Hardware Sovereign: Why China is Listing Chipmakers Before Model Labs In the global race for artificial intelligence dominance, the conventional wisdom has been to fund the model labs first, letting the compute infrastructure follow the demand. But in China, the capital markets are inverting this hierarchy. By prioritizing the public listing of AI chipmakers…