Reports
AI-generated structured vendor updates
Anthropic Releases Zero Trust Framework for AI Agents
Anthropic releases the industry's first Zero Trust framework for AI agents, defining core principles, five agent-specific threats, and a six-capability roadmap. It shifts security focus from network perimeters to agent identity, behavior, and least agency, setting a new baseline for AI agent security.
Intel CEO: AI Inference Flips CPU/GPU Ratio, Multi-Agent Pushes CPU Back to Core
Intel CEO Lip-Bu Tan forecasts AI inference driving CPU/GPU ratio from 1:8 to 1:1 or even 4:1, with Multi-Agent demands (OS scheduling, KV Cache offload, high-concurrency tool calls) elevating CPU from supporting role to lead. NVIDIA Vera, AMD Venice, and Intel 18A CPU mass production confirm a CPU demand super-cycle.
Fortinet Hardens AI Security into ASIC with 3500G/400G, Shifting Control to Silicon
Fortinet expands FortiGate G-series with 3500G (400GbE datacenter) and 400G (enterprise edge), natively integrating shadow AI detection and MCP traffic inspection into NP7/SP5 ASICs, shifting AI security from software to silicon for zero-performance-loss security enforcement.
BadHost CVE-2026-48710: Starlette Auth Bypass Exposes AI Agent Infrastructure to HTTP Smuggling
BadHost (CVE-2026-48710) exploits Starlette's inconsistent URL reconstruction via Host header injection, bypassing path-based auth. Affecting 400K+ repos including FastAPI, vLLM, and MCP Server, it exposes AI Agent infrastructure to data theft and potential RCE, forcing a security paradigm shift in HTTP parsing.
Google Cloud I/O '26: A2A Protocol and Managed Agents API Shift Agent Control Plane
At Google I/O '26, Google Cloud unveiled a unified agent development toolkit featuring Antigravity 2.0, Managed Agents API, ADK 2.0, and the A2A protocol. The platform evolves Vertex AI into Gemini Enterprise Agent Platform, offering a four-rung ladder from low-code to code-first. It aims to bridge local prototyping and secure cloud deployment via a shared protocol layer, but effectively centralizes agent lifecycle control onto Google Cloud's managed plane.
KPMG Embeds Claude for 276k Staff, Reshaping Professional Services AI
KPMG announces a global alliance with Anthropic, embedding Claude into its core Digital Gateway platform and making it available to all 276,000+ employees. This integration, starting with tax and legal services and expanding to cybersecurity and private equity, signifies a fundamental shift from AI-assisted work to an AI-native service delivery model, positioning Claude as the default intelligence layer for professional services.
Google TPU 8t/8i Enables Cross-Datacenter Training, Gemini 3.5 Flash 4x Faster
Google unveils TPU 8t (training) and TPU 8i (inference) with 3x raw compute and 2x perf-per-watt. JAX/Pathways enable distributed training across 1M+ TPUs across sites. Gemini 3.5 Flash delivers 4x output tokens per second vs frontier models. SynthID adopted by OpenAI, Nvidia, Kakao, Eleven Labs.
Google Cloud Managed MCP Server Shifts AI Data Layer Control from SQL to Standardized Protocol
Google Cloud introduces Managed MCP Tools, standardizing AI-to-data interaction via the Model Context Protocol. The blog outlines five scenarios from static APIs to MCP agents, highlighting MCP as an open standard that decouples reasoning from data access, though the managed implementation tightly couples to BigQuery.
Google Cloud Shifts Control Plane to Application-Centric Management with New Hub
Google Cloud launches Application Design Center, App Hub/App Topology, and Cloud Hub, making the 'Application' the central management unit. With opinionated compliance templates, auto-generated Terraform, and Gemini Cloud Assist integration, it delivers AI-driven governance across the lifecycle, shifting the control plane from infrastructure resources to application semantics.
AWS AgentCore Payments: Autonomous AI Agent Spending Unlocks New Lock-in and Threat Surface
AWS previews managed payment capabilities in Bedrock AgentCore, enabling AI agents to autonomously pay for APIs, MCP servers, and web content, integrated with Coinbase and Stripe. Also launches Agent Toolkit for AWS and MCP Server GA. This pushes AI agents toward autonomous execution but introduces new security and lock-in risks.
AWS Releases Managed MCP Server for Secure AI Agent Access to AWS APIs
AWS announced the general availability of its managed Model Context Protocol (MCP) server, providing authenticated and secure access to AWS services for AI coding agents like Claude Code and Kiro. The server offers a fixed set of tools to call AWS APIs, retrieve real-time documentation, and introduces sandboxed script execution and curated 'Skills' to address production challenges such as outdated knowledge and overly broad IAM policies generated by agents.
Google Launches Gemma 4 Open Models, Accelerating Local AI Agent Deployment
Google released the Gemma 4 open model family under Apache 2.0 license, introducing MoE architecture for the first time. It aims to deliver high-performance AI agent capabilities directly to mobile and edge hardware, reducing reliance on cloud clusters and enabling new local, private AI applications.
Anthropic Secures Compute Deal with SpaceX, Significantly Boosting Claude Capacity
Anthropic announced a partnership with SpaceX to utilize all compute capacity at the Colossus 1 data center, gaining over 300MW of new capacity. This move aims to directly improve service for Claude Pro and Max subscribers, with immediate increases to Claude Code and API rate limits.
AWS Upgrades Virtual Desktops to AI Agent Infrastructure Layer
AWS announced Amazon WorkSpaces now enables AI agents to securely operate desktop applications using their own identity and permissions, without requiring API integrations or application modernization. This extends virtual desktops from a human productivity tool to a universal runtime platform for enterprise AI agents, integrating with major agent frameworks via the standard Model Context Protocol (MCP).
Fortinet Warns of Surging AI-Accelerated Edge Device Attacks with MCP Servers Used for Attack Automation
<p>Fortinet's investigation reveals a rising trend of AI-assisted attacks targeting edge devices. Attackers use MCP servers and AI to automate cyberattacks — requiring only basic network knowledge, they use prompt-based conversational commands to generate attack frameworks, achieving full automation of target identification, password spraying, and vulnerability exploitation. Key IOCs: anomalous admin access from 212[.]11.64.250 or 185[.]196.11.225, unauthorized user accounts (fortiuser, fortinet-support). This marks an inflection point where AI shifts from "defense tool" to "attack weapon."</p>
Fortinet Warns of Surging AI-Accelerated Edge Device Attacks with MCP Servers Used for Attack Automation
<p>Fortinet's investigation reveals a rising trend of AI-assisted attacks targeting edge devices. Attackers use MCP servers and AI to automate cyberattacks — requiring only basic network knowledge, they use prompt-based conversational commands to generate attack frameworks, achieving full automation of target identification, password spraying, and vulnerability exploitation. Key IOCs: anomalous admin access from 212[.]11.64.250 or 185[.]196.11.225, unauthorized user accounts (fortiuser, fortinet-support). This marks an inflection point where AI shifts from "defense tool" to "attack weapon."</p>
Anthropic Releases AI Agent Templates for Financial Services, Accelerating Enterprise AI Workflow Deployment
Anthropic has released ten ready-to-run AI agent templates for financial services, covering key scenarios like research, compliance, and finance. Delivered as plugins and managed agents with deep Microsoft 365 integration, they aim to reduce AI deployment cycles from months to days. This signals a shift from general-purpose AI to deep integration into vertical industry workflows.
Cisco Acquires Astrix Security to Strengthen Non-Human Identity and AI Agent Security Control Plane
Cisco announces its intent to acquire Astrix Security, a Non-Human Identity (NHI) security specialist. The goal is to integrate AI agent and credential (API keys, service accounts) security management deeply into Cisco's Identity Intelligence platform and Zero Trust Access solutions. This move signals a shift in the security control plane from traditional human-machine interactions towards securing automated AI agent workloads, addressing the new attack surface created by AI agents abusing credentials.
In-depth Analysis of CISA Agentic AI Security Guidelines
CISA released the world's first Agentic AI security deployment guidelines on May 1, 2026, marking a critical transition from theoretical discussions to mandatory compliance requirements.
Cloudflare Dynamic Workflows: Control Plane Shift to Per-Tenant Durable Execution
Cloudflare launches Dynamic Workflows, a library enabling per-tenant dynamic dispatch of durable execution code at runtime. Built on Dynamic Workers, it allows Worker Loader to route and isolate tenant workflows with zero idle cost. Targets multi-tenant SaaS, AI agents, and CI/CD, but creates ecosystem lock-in around Cloudflare runtime.