If the history of financial innovation is a long, tedious struggle to make ledger entries move faster, the Depository Trust & Clearing Corporation (DTCC) has finally stopped fighting the current and started building the dam. When the DTC Tokenization Service officially launches in October 2026, it will not be another experimental sandbox or a boutique…
Somewhere between the prompt injection demos and the jailbreak panic, the real security problem for enterprise AI shifted. It is no longer mainly about what a model says. It is about what an agent does – which APIs it calls, which data it touches, which actions it takes on production systems. The execution layer is…
A critical authentication bypass vulnerability, tracked as CVE-2026-76504, is currently being exploited in the wild against Cisco Catalyst SD-WAN Manager. The vulnerability, which carries a CVSS score of 9.8, allows unauthenticated remote attackers to gain administrative access to the management API. This flaw stems from improper handling of URL/URI encoding, specifically within the j_security_check path.…
Aembit has become the first third-party enforcement point for Okta’s Cross App Access (XAA) protocol, the agent identity standard Okta formalized at Oktane in September 2026. XAA is the open protocol Okta led that became the official Enterprise-Managed Authorization (EMA) extension for MCP. Aembit’s implementation provides enforcement capabilities that Okta’s own platform does not ship…
On October 1, two of the largest moves in agent infrastructure shipped on the same day — and neither was primarily a technical announcement. DigitalOcean launched Agent Droplets, bundling microVMs, memory, session storage, inference on hosted models, and governed access to 16,000+ tools into three subscription tiers. Microsoft launched Agent 365 GCC, packaging agent discovery,…
Robinhood has introduced a structural innovation that may prove more significant than the AI agents themselves. By housing its autonomous trading technology within a distinct entity, Robinhood Labs LLC, while keeping brokerage operations in Robinhood Financial LLC, the firm has created a legal firewall. The question for the industry is whether this architecture is merely…
The White House accord’s self-policing framework is being tested from three directions at once – congressional, regulatory, and internal whistleblowing – and the company’s response has been to fire the people who talked. On September 29, OpenAI’s president Greg Brockman stood at the White House to sign the Joint Commitment on Frontier Responsibilities. The document…
“We are committed to providing federal agencies with the most advanced AI capabilities while maintaining the highest standards of security and compliance,” Microsoft stated in its Agent 365 GCC service description. On October 1, 2026, Microsoft made that commitment concrete. Agent 365 GCC is now generally available to federal, state, and local government agencies, bringing…
CVE-2026-88771, a pre-authentication remote code execution vulnerability in Citrix NetScaler ADC and Gateway appliances, carries a CVSS score of 9.5. It stems from a CWE-20 input validation failure, allowing unauthenticated actors to execute arbitrary commands on critical network infrastructure. This vulnerability is currently being exploited in the wild. The exploitation chain involves a three-stage command…
For the past month, the infrastructure conversation has been dominated by the harness pattern—a standardized architecture for agent runtimes that OpenAI DevDay validated as the industry default. While vendors like AWS, Aiven, and DigitalOcean have spent weeks shipping nearly identical technical stacks, the real battleground has shifted from engineering to accounting. On October 1, 2026,…