Money20/20 USA 2026 opens today at The Venetian in Las Vegas. Its Monday panel, “Know Your Agent: Here’s How Banks Are Updating Identity Verification,” brings Skyfire CEO Amir Sarhangi, Firmly CEO Kumar Senthil, PayOS co-founder Johnathan McGowan, VGS CEO Chuck Yu, and J.P. Morgan’s Frank Medrano to the ArrA.I.val Stage for thirty minutes on agent…
Mastercard has finally stopped pretending that stablecoins are a peripheral experiment. On October 15, 2026, the company launched its Global Money Platform, a move that looks less like a product rollout and more like a frantic fortification of the payment perimeter. The timeline is the most telling detail here. The acquisition of BVNK closed on…
Fewer than 11% of small merchants are ready for AI shopping agents. Agentic orders across Forter’s network have quadrupled since August. Automated fraud has doubled in two months. On October 13, 2026, Forter launched its Agentic Commerce Engine in New York, shipping the most complete merchant-facing stack to date for a channel that is arriving…
Threat actors weaponized a vendor-managed credential in ConnectWise Cloud Backup to authenticate across 173 Microsoft 365 tenants on October 15, 2026. The credential lived in ConnectWise’s own tenant. Customer-side defenses – multi-factor authentication, conditional access, session controls – could not touch it. This is the tenth trust-through-defaults incident on this desk since September 26. The…
As of October 17, 2026, exactly 36 days remain before the current revision of the ID-JAG draft expires on November 22. While draft expiration is routine, this one highlights the chasm between commercial agent infrastructure shipping now and the institutional process supposed to anchor it.
The Ambient Checkout Frontier The transition of agentic commerce from the controlled environment of a smartphone screen to the ambient surfaces of the home and pocket is now underway. On October 15, 2026, PayPal and Glance announced an integration that embeds native checkout directly into the Glance ecosystem. Commerce is now a background process triggered…
Mage OSS, a data pipeline orchestration tool, contains a critical authentication bypass vulnerability tracked as CVE-2026-111823. The flaw, identified in GHSA-93gm-r5p2-wxq7, carries a CVSS score of 9.8. It affects all versions of the platform through 0.9.80. The vulnerability stems from a failure in the OAuth callback handler, which incorrectly manages error states during the authentication…
Between September 26 and October 17, 2026, nine distinct identity-layer bypasses appeared across every tier of the authentication stack. Each exploited the same structural assumption: that an assertion from a trusted source means what the receiving system assumes it means. The incidents span framework, library, plugin, appliance, identity provider, low-code, utility, browser-side, and implementation-layer SaaS…
When an AI agent buys something on your behalf, who is actually authorizing the transaction? For a long time, the industry has treated this as a problem for specific corners of the financial world. Issuers have looked at it through Amex Proof of Intent, networks have explored Credential Convergence, and agent developers have focused on…
On October 15, 2026, Perplexity released its execution sandbox to the public. The SPACE repository — Sandboxed Platform for Agentic Code Execution, written in Rust — carries an Apache 2.0 license, 820 stars as of October 16 (770 in the first 24 hours per the announcement), and the production record of powering every Perplexity Computer…