Reports
AI-generated structured vendor updates
Anthropic Alleges Largest AI Distillation Attack by Alibaba-Linked Operators, Exposing API Security Gaps
Anthropic alerted U.S. senators that Alibaba-linked operators conducted the largest known distillation attack, generating 28.8 million model exchanges via 25,000 fraudulent accounts to harvest Claude's frontier capabilities. The incident exposes a critical vulnerability in AI API security, forcing a rethinking of inference endpoint protection and usage monitoring.
Oracle Defense Ecosystem Cohort 3: Offline AI on Roving Edge Devices Goes Operational
Oracle announced the third cohort of its Defense Ecosystem at the Brussels summit, adding 10 companies. Concurrently, Whitespace's Saga AI system deployed on Oracle Roving Edge Devices during Royal Navy's Operation HIGHMAST, running classified AI workloads completely offline, proving sovereign edge AI is operational.
Anthropic Accuses Alibaba of Massive Distillation Attack on Claude AI Model
Anthropic accused Alibaba-linked operators of conducting 29 million exchanges via thousands of fraudulent accounts to distill Claude's capabilities, including long-context reasoning and decision-making. This highlights the vulnerability of AI model IP under API access, prompting a redefinition of model security boundaries.
NVIDIA Launches Agent Toolkit: Nemotron Models, OpenShell Runtime for Specialized AI Agents
NVIDIA unveils Agent Toolkit, an open modular foundation with Nemotron models, NemoClaw blueprints, and OpenShell runtime, enabling enterprises to build secure, specialized AI agents. It targets life sciences, cybersecurity, and industrial workflows, aiming to turn frontier models into domain-specific digital coworkers.
NVIDIA's AI Agents and Digital Twins Reshape Telecom Network Control Plane
At DTW Ignite 2026, NVIDIA showcases its AI agent platform integrating NeMo synthetic data, NemoClaw secure runtime, OpenShell sandbox, and RTX PRO 6000-accelerated digital twins, aiming for autonomous telecom operations. Partners include SoftBank, Amdocs, NTT DATA, etc., moving from task automation to full autonomy.
CrowdStrike Continuous Identity for AI Agents Shifts Control Plane
At Identiverse 2026, CrowdStrike launched Continuous Identity for AI Agents, a Falcon Next-Gen Identity Security capability. Using SPIFFE for verifiable agent identity, it dynamically grants/revokes access based on real-time risk, eliminates standing privileges, and integrates with Falcon AIDR to detect privilege misuse, shifting the identity control plane from static policies to continuous risk assessment.
CrowdStrike's Continuous Identity for AI Agents: Real-Time Risk Engine Replaces Static Policies
CrowdStrike launches Continuous Identity for AI Agents, assigning cryptographically verifiable identities via SPIFFE and authorizing every agent action based on owner, caller, and device risk in real time. It eliminates standing privileges, integrates with Falcon AIDR for permission misuse detection, and extends the identity security control plane across human, non-human, and AI identities.
Cisco Security Portfolio Moves to AWS Marketplace: Ecosystem Lock-in Accelerates, Multi-Cloud Neutrality Questioned
Cisco announces availability of its full SaaS security portfolio (Duo, Secure Access, Identity Intelligence, Hybrid Mesh Firewall) on AWS Marketplace, with deep integration with Amazon Bedrock and SageMaker for AI security and zero-trust agent management. This move simplifies procurement and accelerates deployment but deepens AWS dependency, potentially sacrificing multi-cloud flexibility.
DXC and Anthropic Forge Multi-Year Alliance: Claude-Certified Engineers for Mission-Critical AI
DXC Technology and Anthropic announce a multi-year global partnership, making DXC a Global Premier partner in the Claude Partner Network. They will train tens of thousands of Claude-certified engineers to deploy Claude models in mission-critical environments via the DXC OASIS platform, using a 'Customer Zero' internal validation approach.
Anthropic Locks Regulated Industries via DXC: Claude-Certified Engineers and OASIS Platform as New Control Points
Anthropic forms a global alliance with DXC Technology, training tens of thousands of Claude-certified forward-deployed engineers to embed Claude into mission-critical systems for banks, airlines, and regulated industries. DXC's OASIS platform defaults to Claude, with over 95% of its code generated by Claude, creating deep dependency.
Anthropic Claude Fable 5 on AWS: Data Retention Policy Breaches Cloud Security Boundary, Erodes Enterprise Data Sovereignty
AWS and Anthropic launch Claude Fable 5 with long-running async execution, advanced vision, and proactive self-verification. Access requires 30-day data retention and sharing with Anthropic, moving inference data outside AWS security boundary. Harmful prompts fall back to Opus 4.8, introducing complex pricing and governance risks.
Cisco Embeds OT Security Control into Switch ASIC: From Visibility to Enforced Segmentation
At Cisco Live 2026, Cisco launches Cyber Vision updates that embed auto-policy recommendation, simulation, and line-rate enforcement directly into IE3500/IE9300 Industrial Ethernet switches using its own ASICs. Secure remote access is also integrated. This shifts OT security control from appliances to the network fabric, creating a closed loop from visibility to prevention, but locks users into Cisco's full stack.
Cisco Agent Gateway: Zero Trust Evolves from Access to Action Control for AI Agents
Cisco launches Agent Gateway for Secure Access, extending Zero Trust from access control to action-level control for AI agents. Using Duo for agent identity, it enforces policies across LLMs, MCP servers, and SaaS APIs, with server-side credential injection and unified audit—addressing the unique security challenges of autonomous agent workflows.
NVIDIA Transaction Foundation Models Shift Financial AI Control to Unified GPU Stack
NVIDIA launches a developer example for transaction foundation models, partnering with Revolut, Mastercard, and others to replace siloed ML models with unified transformer-based systems. Leveraging Hopper GPUs, cuDF, and Nemotron, it shifts financial data processing from feature engineering to unified embeddings, effectively moving control to NVIDIA's hardware ecosystem.
Cisco Locks Security Pipeline: Splunk as Central Hub for Firewall and Runtime Telemetry
Cisco integrates Splunk with Cisco Secure Firewall advanced logging and Isovalent Enterprise Platform (eBPF-based Kubernetes runtime visibility), delivering pre-built detections and correlation. This move aims to transform fragmented security telemetry into high-confidence threat signals, deepening lock-in to Cisco's security platform.
Cisco Talos Threat Hunting Expands Across Endpoint, Network, and Identity Domains
Cisco Talos expands threat hunting to network (Cisco Firewall) and identity (Cisco Duo) domains, using an AI-driven engine for hypothesis-based searches. Findings are delivered via Cisco Security Cloud Control, targeting stealthy threats that evade alert-based detection.
NVIDIA BlueField DPU In-Silicon Security Shifts AI Factory Control from Software to Hardware
NVIDIA unveils DOCA security stack (Argus, Vault, Flow) on BlueField-4 DPU, enabling hardware-isolated runtime threat detection via zero-copy memory analysis, zero-trust file access, and 800 Gb/s network enforcement. This shifts security control from host OS to DPU silicon, delivering distributed full-stack protection without compromising AI throughput, but deeply ties to Vera Rubin platform, creating ecosystem lock-in.
Cisco & Microsoft Join Forces: Browser Becomes Zero Trust Control Plane with SSE-Edge Integration
Cisco Secure Access integrates deeply with Microsoft Edge for Business, embedding zero-trust access, DLP, and AI threat protection directly into the browser. The browser replaces VPN/agent as the primary entry point for private apps, with unified policy enforcement that also governs AI agents like Copilot, signaling a control plane shift from network to browser layer.
Cisco Full-Stack PQC Switches Lock Down Quantum Security with Hardware Trust Anchor
Cisco unveils C9000 Smart Switches, the first enterprise switches with full-stack post-quantum cryptography (PQC). A **Trust Anchor module (TAm)** embedded in FPGA enables quantum-resistant secure boot, while **IOS XE** integrates **ML-KEM** for key exchange in **SSH, MACsec, IPsec, TLS**. Aimed at harvest-now-decrypt-later threats, but no performance data disclosed.
Google Antigravity Control Plane Redefines AI Development, Locks Agent Orchestration
At I/O 2026, Google launched Antigravity 2.0 desktop app and CLI/SDK as a unified agent control plane, alongside Gemini 3.5 Flash/Omni models, Managed Agents API, and native Android support in AI Studio. This aims to streamline AI development from prototype to production, but effectively locks developers into Google's ecosystem and cloud services.