Reports
AI-generated structured vendor updates
GhostApproval Vuln Exposes Systemic AI Coding Tool Flaw: Symlink Bypass in Human Review
Wiz Research discloses GhostApproval vulnerability affecting six major AI coding tools (Claude Code, Codex, Cursor, Amazon Q, Antigravity). Attackers use symlinks to bypass human review, achieving persistent remote access. The flaw reveals fundamental UI-level security gaps in Human-in-the-Loop mechanisms as agent permissions expand, requiring a redesign of confirmation workflows.
OpenAI and Broadcom Tape Out First Inference ASIC Jalapeño in 9 Months, Targeting NVIDIA Dominance
OpenAI and Broadcom unveil Jalapeño, their first custom inference ASIC, fabricated on TSMC 3nm and optimized for Transformer models. Targeting a 50% inference cost reduction, it taped out in 9 months and is slated for deployment in gigawatt-scale data centers by late 2026, marking OpenAI's strategic pivot to full-stack AI infrastructure and a direct challenge to NVIDIA's inference hegemony.
Making private MCP servers reachable without making them public | OpenAI Developers
...
OpenAI and Broadcom unveil Jalapeño inference ASIC to bypass NVIDIA GPU dependency
OpenAI and Broadcom launch Jalapeño, a custom ASIC for LLM inference, achieving tape-out in 9 months. OpenAI designs architecture, Broadcom provides networking, Celestica handles integration. Planned for large-scale deployment by end-2026 with gigawatt-scale datacenters, aiming to cut inference costs and reduce NVIDIA dependency.
OpenAI and Broadcom Unveil Jalapeno Inference ASIC, Reshaping AI Hardware Landscape
OpenAI, in collaboration with Broadcom, has developed Jalapeno, a custom LLM inference accelerator. The chip uses a multi-chip module with HBM3E memory and achieved tape-out in just nine months. Designed for OpenAI's model stack, it aims to reduce inference costs and dependency on NVIDIA GPUs, with initial deployment planned for late 2026.
OpenAI GPT-5.6 Aggressive Pricing and 1.5M Context Window Targets Agent Era
OpenAI reportedly launches GPT-5.6 with 1.5M token context window, aggressive pricing at one-third of Claude Fable 5, and improved agent reliability. This move capitalizes on Anthropic's forced downtime and addresses internal alignment issues.
Microsoft Shifts Copilot Cowork to Usage-Based Pricing, Eyes DeepSeek for Cost-Efficiency
Microsoft transitions Copilot Cowork to usage-based billing (Copilot Credits) and considers integrating fine-tuned DeepSeek V4 or open-source models as low-cost alternatives, hosted on Azure. This move addresses high costs from intensive usage and signals a multi-model strategy.
Nvidia ENPIRE: AI Agents Autonomously Train Robots to Install GPUs at 99% Success
Nvidia's ENPIRE framework enables AI coding agents (Codex, Claude Code) to autonomously write, test, and refine robot training code, achieving 99% pass@8 on GPU insertion and other contact-rich tasks. The system uses Git for collaboration, but token consumption scales faster than fleet size, and simulation-to-reality transfer remains imperfect.
OpenAI buys Ona: Control point shifts to persistent AI agent runtime
OpenAI acquires cloud infrastructure startup Ona to integrate its persistent execution environment into Codex, enabling AI agents to run independently for hours or days in enterprise-owned clouds. This addresses security, governance, and audit requirements, signaling OpenAI's shift from model provider to full-stack AI platform.
OpenAI Pivots to Codex: From Chatbot to Agentic Control Plane for Enterprise Automation
OpenAI plans its biggest ChatGPT overhaul, integrating Codex, AI agents, and third-party apps into a super-app. This marks a strategic pivot from a Q&A chatbot to an agentic execution platform, with Codex as the new control plane, aiming to boost enterprise monetization and counter Anthropic's competitive threat.
AWS Bedrock New Console Embraces OpenAI/Anthropic APIs, Shifting Control to Inference Layer
AWS launches a new Bedrock console powered by the bedrock-mantle endpoint, natively supporting OpenAI and Anthropic API protocols. Users can seamlessly switch between GPT, Claude, and open-weight models. This move standardizes model access, aiming to lock users into AWS's unified inference plane while weakening individual model provider API lock-in.
Cisco Agent Gateway: Zero Trust Evolves from Access to Action Control for AI Agents
Cisco launches Agent Gateway for Secure Access, extending Zero Trust from access control to action-level control for AI agents. Using Duo for agent identity, it enforces policies across LLMs, MCP servers, and SaaS APIs, with server-side credential injection and unified audit—addressing the unique security challenges of autonomous agent workflows.
Cisco Cloud Control & AI Canvas: The Control Point Shifts from Hardware to the AI Decision Plane
At Cisco Live 2026, Cisco launched Cloud Control, an AI-ops platform with agentic workflows, and AI Canvas for human-agent collaboration. The platform leverages Splunk's data fabric and proprietary models trained on 40 years of Cisco data. The Silicon One architecture now unifies campus and cloud switches. This marks a strategic pivot from hardware vendor to AI platform, shifting the control point to the AI decision plane.
AWS Hosts OpenAI GPT-5.5 & Codex: Control Shifts from Model to Cloud
AWS launches OpenAI GPT-5.5, GPT-5.4, and Codex on Bedrock via the Responses API. This integrates frontier models into AWS infrastructure for data residency and capacity management, but locks users into Bedrock's ecosystem.
NVIDIA FOX Blueprint Shifts Factory Control from PLCs to AI Agents on DGX
NVIDIA unveiled the Factory Operations Blueprint (FOX), a reference design for autonomous factory manager agents using NemoClaw, AI-Q Blueprint, and DGX Station (GB300 with 20 PFLOPS FP4, 748GB coherent memory). It unifies live machine signals, quality systems, and robot fleets under an AI decision layer. Foxconn, Pegatron, Advantech, and Wistron are early adopters, projecting 80% faster root cause analysis and 15% labor productivity gains.
AWS Releases Managed MCP Server for Secure AI Agent Access to AWS APIs
AWS announced the general availability of its managed Model Context Protocol (MCP) server, providing authenticated and secure access to AWS services for AI coding agents like Claude Code and Kiro. The server offers a fixed set of tools to call AWS APIs, retrieve real-time documentation, and introduces sandboxed script execution and curated 'Skills' to address production challenges such as outdated knowledge and overly broad IAM policies generated by agents.
NVIDIA Opens MRC Protocol via OCP, Pushing Standardization of AI Ethernet Fabrics
NVIDIA announced the opening of its MRC (Multipath Reliable Connection) RDMA transport protocol via the Open Compute Project (OCP). The protocol, proven on Spectrum-X Ethernet hardware, aims to enhance throughput, resilience, and GPU utilization for large-scale AI training clusters through multi-path load balancing and hardware-level failure bypass.
NVIDIA Collaborates with OpenClaw via NemoClaw to Drive Secure Enterprise Autonomous AI Agent Deployment
NVIDIA introduces NemoClaw, a reference implementation that bundles OpenClaw with the OpenShell secure runtime and Nemotron open models, providing a blueprint for secure enterprise deployment of long-running autonomous AI agents. This move addresses the 1000x inference demand surge and security governance challenges, shifting the AI infrastructure control point towards local, secure, and auditable architectures.
Cloudflare Dynamic Workflows: Control Plane Shift to Per-Tenant Durable Execution
Cloudflare launches Dynamic Workflows, a library enabling per-tenant dynamic dispatch of durable execution code at runtime. Built on Dynamic Workers, it allows Worker Loader to route and isolate tenant workflows with zero idle cost. Targets multi-tenant SaaS, AI agents, and CI/CD, but creates ecosystem lock-in around Cloudflare runtime.
AWS Platformizes AI Agents and Deepens Cloud Integration with OpenAI
At its annual event, AWS announced the productization of AI agent capabilities, launching the personal AI assistant for work, Amazon Quick, and expanding Amazon Connect into four vertical-specific Agentic AI solutions. Concurrently, AWS and OpenAI expanded their partnership, deeply integrating the latest models, Codex, and managed agent services into the Amazon Bedrock platform.