Reports
AI-generated structured vendor updates
Zscaler's AI-Guardian Shifts Zero Trust Control Plane to Non-Human AI Identities
Zscaler launches Project AI-Guardian with six GSIs to extend Zero Trust to AI agents, introducing AI Protect suite. The core shift treats non-human identities as first-class security principals, enabling granular access control and continuous red-teaming for AI agent ecosystems.
Cloudflare Tests Anthropic Claude Mythos: 90x Boost in AI-Driven Vulnerability Discovery Reshapes Security
Cloudflare revealed using Anthropic Claude Mythos Preview (Project Glasswing) to test its codebase, discovering high-severity vulnerabilities including API key theft and unauthorized access. The model produced 90x more exploitable vulnerability reports than traditional methods, with reproduction steps and evidence, significantly reducing validation difficulty. This pushes AI security from defense to proactive vulnerability discovery.
Google Cloud I/O '26: A2A Protocol and Managed Agents API Shift Agent Control Plane
At Google I/O '26, Google Cloud unveiled a unified agent development toolkit featuring Antigravity 2.0, Managed Agents API, ADK 2.0, and the A2A protocol. The platform evolves Vertex AI into Gemini Enterprise Agent Platform, offering a four-rung ladder from low-code to code-first. It aims to bridge local prototyping and secure cloud deployment via a shared protocol layer, but effectively centralizes agent lifecycle control onto Google Cloud's managed plane.
KPMG Embeds Claude for 276k Staff, Reshaping Professional Services AI
KPMG announces a global alliance with Anthropic, embedding Claude into its core Digital Gateway platform and making it available to all 276,000+ employees. This integration, starting with tax and legal services and expanding to cybersecurity and private equity, signifies a fundamental shift from AI-assisted work to an AI-native service delivery model, positioning Claude as the default intelligence layer for professional services.
Google TPU 8t/8i Enables Cross-Datacenter Training, Gemini 3.5 Flash 4x Faster
Google unveils TPU 8t (training) and TPU 8i (inference) with 3x raw compute and 2x perf-per-watt. JAX/Pathways enable distributed training across 1M+ TPUs across sites. Gemini 3.5 Flash delivers 4x output tokens per second vs frontier models. SynthID adopted by OpenAI, Nvidia, Kakao, Eleven Labs.
Google Antigravity 2.0 Shifts Control from Model API to Agent Orchestration
Google launches Antigravity 2.0 desktop app, Managed Agents API, and AI Studio mobile, creating an agent-first development platform. Powered by Gemini 3.5 Flash (4x faster), it deeply integrates with Android, Firebase, and Workspace, aiming to lock developers into Google's orchestration layer.
Anthropic and Cloudflare Decouple AI Agent Brain from Hands
Anthropic and Cloudflare integrate Claude Managed Agents with Cloudflare Sandboxes, decoupling AI reasoning from execution. Users gain full control over sandboxing, security, and observability on Cloudflare's platform, with options for microVMs or lightweight V8 isolates, plus built-in browser, email, and custom tools.
Google Cloud Managed MCP Server Shifts AI Data Layer Control from SQL to Standardized Protocol
Google Cloud introduces Managed MCP Tools, standardizing AI-to-data interaction via the Model Context Protocol. The blog outlines five scenarios from static APIs to MCP agents, highlighting MCP as an open standard that decouples reasoning from data access, though the managed implementation tightly couples to BigQuery.
Cloudflare Tests Anthropic Mythos: AI-Driven Exploit Chain Construction and Proof Generation
Cloudflare's Project Glasswing tested Anthropic's Mythos Preview, revealing its ability to automatically chain multiple low-severity bugs into exploitable PoCs with runnable code. They built a multi-stage harness to manage noise and context limits, achieving a significant leap in vulnerability discovery quality.
AI Agent Workloads Trigger Structural CPU Shortage, Arm and AMD Reshape Server Value Chain
AI inference and agent orchestration surge CPU demand, shifting CPU-GPU ratio from 1:8 to 1:1. AMD EPYC lead time 8-12 weeks, Intel Xeon up to 6 months; Arm's 3nm 136-core AGI processor co-developed with Meta/Cerebras/Cloudflare/OpenAI sees demand exceeding 200 billion USD. CPU replaces GPU as the new AI infrastructure bottleneck, with Arm and AMD reshaping the value chain.
NVIDIA CUDA Heap Overflow Exposes GPU Cloud Isolation Flaw: Driver-Level Security Must Move to Hardware
At Pwn2Own Berlin 2026, a heap overflow in NVIDIA CUDA Toolkit's NVVM compiler (CVE-2026-12839) enabled GPU cloud cross-tenant escape. The attack chain from malicious PTX to driver compromise to host kernel breaks current driver-level isolation, forcing a fundamental security architecture re-evaluation for shared GPU AI infrastructure.
Cisco AI Orders Surge to $9B, but SD-WAN Zero-Day for Third Year Reveals Systemic Security Gap
Cisco Q3 FY2026 raises AI infra order target to $9B, yet a CVSS 10.0 authentication bypass zero-day in SD-WAN Controller (CVE-2026-20182) is exploited by the same APT for the third consecutive year. This reveals a systemic gap in Cisco's security engineering as it pivots to AI, and a fundamental flaw in SD-WAN control plane architecture.
Palo Alto Networks Idira: Democratizing Privilege Control, AI Agent Identity as New Control Plane
Palo Alto Networks launches Idira, an identity security platform built on CyberArk PAM, extending privileged access control to every human, machine, and AI agent identity. Core features include Zero Standing Privilege (ZSP), JIT permissions, and an AI engine for automatically discovering hidden entitlements and recommending least privilege. Idira becomes PANW's third core platform alongside Strata and Cortex.
Cisco Unified Edge: Service Providers' New Ecosystem Bundle for Edge AI Services
Cisco launches Unified Edge platform integrating compute, networking, storage, and security, managed via Intersight, targeting service providers to deploy AI inference at thousands of edge sites. Verizon as early adopter plans to bundle edge capabilities into enterprise connectivity offerings.
Cisco Uses MRC to Push SRv6: A Stealth Power Grab in AI Networking
Cisco claims MRC protocol is built on its SRv6 architecture, highlighting application-driven networking, static routing reliability, and deterministic visibility. This is a strategic move to lock AI networking into Cisco's SRv6 ecosystem, countering NVIDIA's Spectrum-X and Arista's alternatives.
Google Cloud Shifts Control Plane to Application-Centric Management with New Hub
Google Cloud launches Application Design Center, App Hub/App Topology, and Cloud Hub, making the 'Application' the central management unit. With opinionated compliance templates, auto-generated Terraform, and Gemini Cloud Assist integration, it delivers AI-driven governance across the lifecycle, shifting the control plane from infrastructure resources to application semantics.
Microsoft's DQI at WinHEC 2026: Shifting Driver Control from IHVs to Microsoft
At WinHEC 2026, Microsoft announced the Driver Quality Initiative (DQI), centered on transitioning third-party kernel-mode drivers to user-mode or Microsoft-authored class drivers, alongside enhanced trust verification, lifecycle management, and quality metrics. This aims to systematically improve Windows driver quality but effectively consolidates Microsoft's control over the driver ecosystem.
Cloudflare's Trio of Patches Breaks ClickHouse Partition Bloat Lock Contention
Cloudflare's billing pipeline slowed after a partitioning change to (namespace, day) in ClickHouse, causing massive lock contention from exploding part counts. Three patches—shared lock, deferred vector copy, and binary search—cut query latency by >50% and decoupled performance from part count.
Cisco N9300 Smart Switches Embed Security into AI Data Center Fabric
At ONUG 2026, Cisco unveiled Nexus One architecture and N9300 Smart Switches, embedding L4 segmentation, Hypershield, eBPF-based Live Protect, and DPU-integrated firewall directly into the network fabric. This aims to deliver bottleneck-free security for AI workloads while enabling AI-driven operations via AgenticOps and AI Canvas.
Falcon AIDR Detects Threats at Prompt Layer in Kubernetes AI Apps
...