Reports
AI-generated structured vendor updates
Cisco, Aliro, zerothird Demo Operational QKD Network with MACsec
Cisco, Aliro, and zerothird demonstrated an operational entanglement-based QKD network at Cisco Photonics Center. Aliro Orchestrator manages quantum key distribution, feeding keys via Cisco SKIP interface into Cisco 8000 routers for MACsec encryption, marking a transition from lab to production.
FortiBleed Exposes 70k+ Devices: Attack Surface Shifts from Zero-Day to Credential Hygiene
In July 2026, the FortiBleed credential theft campaign targeted 73,000+ Fortinet devices using a custom sniffer tool. Attackers exploited default/weak passwords, not zero-days, and are linked to INC and Lynx ransomware groups. Global banks, energy firms, and critical infrastructure operators are impacted, exposing a systemic failure in basic security hygiene.
NVIDIA's HVDC Power Shift Reshapes AI Data Center Energy Efficiency and Supply Chain
NVIDIA is driving a shift from AC to HVDC power systems for AI data centers, aiming to reduce conversion losses and improve efficiency. This move will reshape the entire supply chain for servers, power equipment, and cooling, but faces challenges in safety and standardization. It signals a generational change in AI infrastructure power delivery.
MemGhost Attack: Persistent False Memory Injection in AI Agents via Email
Researchers unveil MemGhost, a stealth memory injection attack that plants persistent false memories into AI agents via a single email without user notification. It exploits the persistent memory feature, highlighting critical security gaps and driving demand for memory auditing.
SANS Identifies Distributed Scanning of MCP Servers and AI Assistant Configs
SANS Internet Storm Center reports systematic scanning of MCP servers, AI assistant configs, and local LLM endpoints. 49 IPs targeted MCP handshakes, exploiting CVEs in MCP SDKs, signaling AI infrastructure as a new attack vector.
OpenClaw Vulnerabilities Reveal Host Execution Environment as New Attack Surface for AI Assistants
Three critical vulnerabilities (CVSS 8.8/8.4) in OpenClaw's personal AI assistant enable command injection and path traversal, leading to host RCE. This confirms the host execution environment as a new attack surface for AI assistants, blending traditional exploits with AI agent risks.
Palo Alto Networks PAN-OS Vulnerabilities: Buffer Overflow and Active Exploitation
Palo Alto Networks disclosed 13 PAN-OS vulnerabilities, with the most critical being CVE-2026-0288 (CVSS 9.2), a buffer overflow in User-ID TSA allowing unauthenticated RCE. CVE-2026-0257, an authentication bypass in GlobalProtect, is actively exploited in the wild.
GhostApproval Vuln Exposes Systemic AI Coding Tool Flaw: Symlink Bypass in Human Review
Wiz Research discloses GhostApproval vulnerability affecting six major AI coding tools (Claude Code, Codex, Cursor, Amazon Q, Antigravity). Attackers use symlinks to bypass human review, achieving persistent remote access. The flaw reveals fundamental UI-level security gaps in Human-in-the-Loop mechanisms as agent permissions expand, requiring a redesign of confirmation workflows.
CrowdStrike Capitalizes on 5x AIDR Growth to Enter Identity Security, Seizing AI Runtime Control Plane
CrowdStrike reports 5x growth in its AIDR product, expanding into identity security. AIDR monitors AI app data flows, detects prompt injection and model jailbreaks, and launches Shadow AI Discovery for Endpoint to auto-discover AI apps and LLM runtimes on endpoints. This signals a control plane shift from traditional endpoint detection to converged AI workload and identity security.
Cisco Locks AI Data Center Security Control Plane with Silicon One and Hypershield
Cisco launches next-gen security for AI data centers, deeply integrating Splunk SIEM with its Silicon One 51.2Tbps chip and Hypershield architecture to push security policies to the network edge. This move aims to shift the security control plane from standalone appliances to its proprietary ASIC and management platform, creating hardware lock-in.
Anthropic Admits Covert Tagging in Claude Code: Full-Chain Account Locking Signals Control Shift
Anthropic confirms a covert account tagging system in Claude Code to detect and block unauthorized resale and model distillation, causing full-chain lockout for users in certain regions. This defensive move against IP leakage shifts access control from users to the vendor, risking collateral damage on legitimate customers.
CrowdStrike and Zscaler Integrate Identity Security for Real-Time Zero Trust Access Decisions
CrowdStrike and Zscaler integrate Falcon identity security with Zscaler Zero Trust Exchange, using AI to assess 2.5 trillion endpoint events per second for real-time risk-based access decisions, converging endpoint security and zero trust network access.
Cloudflare Ultimatum: Mandatory AI Crawler Separation to Control Web Data Flow
Cloudflare mandates that AI companies must separate search crawlers from AI training/agent crawlers by Sep 15, 2026, or face global blocking. It also launches Monetization Gateway and Pay Per Use, using digital fingerprinting to charge for content citation. This will reshape AI data acquisition and may worsen data scarcity.
OpenAI Accepts US Gov Pre-Release AI Model Review, Regulatory Framework Reshapes Deployment Cadence
OpenAI commits to a voluntary US government framework requiring 30-day pre-release access for safety evaluation of frontier AI models. This shift from pure market-driven to regulated deployment will affect release cadence for models like GPT-5. Anthropic also signals participation.
OpenAI Launches GPT-5.6 Series, Regulatory Compliance Becomes Prerequisite for Frontier Models
OpenAI releases GPT-5.6 series with Sol achieving 96.7% SOTA on Terminal-Bench 2.1 via Ultra mode with sub-agent parallelism. Terra matches GPT-5.5 at half price, Luna for low-cost high-concurrency. Initial access limited to 20 trusted partners, subject to US government safety review.
Google Cloud Launches Blackwell GPU Confidential VM & Open-Source Prompt Encryption SDK, Redefining AI Security
Google Cloud upgrades its confidential computing portfolio with Blackwell GPU-based confidential VMs (Confidential G4 VMs preview), open-source Prompt Encryption SDK, and enhanced Confidential Space featuring Intel Trust Authority and Hopper GPU support, addressing TEE vulnerability CVE-2026-33697 to bolster AI inference and cross-organization training security.
Anthropic Launches Custom AI Chip: Vertical Integration to Control Inference Cost and Supply
Anthropic launched Claude Sonnet 5 and revealed a custom AI chip initiative, using Samsung foundry. This move aims to reduce dependency on NVIDIA, control long-term inference costs, and marks Anthropic's shift from a pure software company to a vertically integrated infrastructure firm.
Critical Relay Attack Found in Attestation TLS Protocol: Both Intel TDX and AMD SEV-SNP Affected
A critical architecture flaw in the attestation TLS protocol, enabling relay attacks, has been discovered affecting both Intel TDX and AMD SEV-SNP platforms. With a CVSS score of 7.5, it surpasses recent high-profile confidential computing vulnerabilities. No official patch is currently available.
Anthropic Unleashes Aggressive Geo-Blocking: Timezone Detection & Steganography to Kill Cross-Border AI Access
Ahead of its IPO, Anthropic enforces the strictest geo-blocking policy using timezone detection, steganographic user tagging, and banning four evasion methods. Alibaba has internally banned Claude Code, pushing local alternatives. This reshapes global AI tool compliance.
Cloudflare Default Blocks AI Training Crawlers, Reshaping Data Access Ecosystem
Cloudflare introduces granular crawler tags and will default block AI agents and training crawlers from ad-supported pages starting Sept 15, 2026. This gives website owners precise control over AI data scraping, potentially raising costs for AI training data acquisition.