Agents | Vanderburgh.it

Security · September 9, 2026

AI-assisted secret triage becomes trustworthy when its attribution and risk reasoning remain visible and remediation stays human-owned

GitGuardian says Public Secrets Monitoring now runs two AI agents and deep analysis on every public GitHub and Docker Hub incident, returning a company-related verdict, risk score, and visible reasoning. The company reports that AI-service credentials reached 1.27 million exposed instances last year, and that 24,008 unique secrets appeared in public MCP configuration files. New workspaces receive the analysis by default, with existing workspaces rolling out gradually; the workflow does not close incidents automatically.

Public-secret monitoring product announcement GitGuardian

Open edition

Agents · September 8, 2026

Self-hosted coding-agent workers improve execution control only when the cloud control plane and data flows remain explicit

Cursor has introduced Self-Hosted Machines, allowing Cloud Agents to execute tool calls on dynamically scheduled workers inside a team's network while Cursor continues to run the agent loop, planning, and inference. Workers keep a long-lived outbound HTTPS connection to Cursor; they can be organised into shared pools that scale with queued work and serve multiple repositories. Cursor notes that tool output may include code and that agent transcripts may be processed and stored in its cloud.

Self-hosted agent-worker product announcement Cursor

Open edition

Security · September 4, 2026

AI agents need centrally managed cross-application authorization when every user reconnect and static credential becomes a governance gap

Auth0 has launched Early Access Client App capabilities for Cross App Access, an architecture for B2B applications and AI agents that request data from external APIs or Model Context Protocol servers. Auth0 says the implementation uses the emerging Enterprise-Managed Authorization extension and IETF Identity Assertion Authorization Grant work so enterprise IT can approve access through existing identity-provider trust rather than relying on static API keys or repeated user connection prompts.

Enterprise-managed authorization Early Access announcement Auth0

Open edition

Agents · September 3, 2026

Agent governance needs a complete inventory before teams can judge ownership, permissions, and blast radius

Okta has added AI-agent discovery to all existing Identity Security Posture Management subscriptions. Its inventory can surface endpoint agents and MCP servers, builder-platform agents, OAuth grants, and shadow AI applications, then place agent-related misconfigurations alongside other identity risks. Some discovery sources remain Early Access or planned, so coverage should be validated against the organisation's actual endpoints and builder platforms.

Identity Security Posture Management product announcement Okta

Open edition

Security · September 2, 2026

Agentic operations need a governed execution model when analysis can turn directly into enterprise action

Palo Alto Networks has acquired Console, an AI-native platform designed for agentic workflows across enterprise operations. Palo Alto Networks says Console will deepen Cortex capabilities that help teams investigate signals, prioritise work, and act across their environment; the announcement describes natural-language workflows that can automate alerts, issues, and requests.

Agentic operations acquisition announcement Palo Alto Networks

Open edition

Security · September 1, 2026

AI gateways become operationally useful when model access, tools, and network permissions can be governed through one identity-aware control point

Tailscale has made Aperture generally available for securing and managing AI agents and LLM sessions. Its documented controls include model access and spend controls, request and response hooks, guardrails, logging, MCP support, API proxying, and approval-based access to tailnet nodes and SSH resources.

AI gateway general-availability announcement Tailscale

Open edition

Tools · September 1, 2026

Coding-agent rollouts need a migration path when a model provider can change the terms of a familiar developer tool

OpenAI says it plans to wind down its contract providing OpenAI models to Cursor and has proposed a transition period through November 12, 2026; Cursor could choose to end access sooner. OpenAI documents two continuation paths inside Cursor: bring an API key for local Chat and Agent features, or use the Codex IDE extension with a ChatGPT subscription or API key.

Official product-transition guidance OpenAI

Open edition

Security · August 26, 2026

MCP access becomes easier to govern when each agent connection inherits identity-provider policy and the user’s existing role

Supabase has made enterprise-managed authentication generally available for its MCP server on Team and Enterprise plans. With SSO and a supported identity provider, an administrator can authorize a client centrally while each employee’s access remains limited to their existing Supabase role and project permissions. Supabase documents short-lived, non-refreshable access tokens and central revocation through Authorized Apps.

Enterprise-managed MCP authentication announcement and documentation Supabase

Open edition

Infrastructure · August 25, 2026

Agent platforms need an inference design that reflects long, multi-step workloads rather than relying on a generic model benchmark

NVIDIA says Groq 3 LPX is now in production as an extension of the Vera Rubin platform, with Nebius as the first committed cloud adopter. The accelerator is aimed at fast token generation for long-context, multi-step agent workloads where repeated model calls can turn inference latency into the limit on the whole business process.

Agent-inference platform announcement NVIDIA

Open edition

Agents · August 25, 2026

Coding agents need permission-aware context across repositories without turning source access into an invisible data-sharing decision

Atlassian Code Context combines lexical and semantic code search with work and organisational context from the Teamwork Graph. It can give coding agents access to relevant material across connected repositories while evaluating existing source-control permissions, but third-party agents still process retrieved code under their own service terms.

Permission-aware code-context announcement Atlassian

Open edition

Tools · August 18, 2026

Agent operations need end-to-end observability when model behaviour becomes part of the production incident path

TLDR IT reported Dynatrace's plan to acquire Arize for roughly $915 million. Arize brings visibility into model outputs, agent behaviour, and tool use; Dynatrace contributes application and infrastructure telemetry. Together, that points to a practical requirement: teams must be able to follow an agent failure from a surprising output or tool call through the affected service, transaction, and customer workflow.

AI observability acquisition report DevOps.com

Open edition

Security · August 18, 2026

No-code agent automations need least-privilege identities and approvals before they gain reach across business systems

Google is adding least-privilege agent identities, audit trails, flow-level access controls, human approvals, and DLP protections to Workspace Studio. The relevance is broader than one platform: as employees build automations that act across mail, files, and collaboration systems, the control contract has to travel with each flow rather than depend on an administrator spotting risk after release.

Enterprise agent-automation controls announcement Google Workspace Updates

Open edition

Agents · August 18, 2026

Enterprise agents need bounded autonomy when a useful action can also change a real business outcome

TLDR IT highlighted a pragmatic operating pattern for enterprise agents: define narrow tool permissions, verification checks, durable audit trails, staged rollout, cost and step limits, and human approval where impact is higher. These controls do not make an agent less useful; they make the difference between a demonstrator and a service that can be trusted with consequential work.

Enterprise agent-governance analysis InfoWorld

Open edition

Security · August 14, 2026

Enterprise agents need a central control plane when routing, identity, policy, and cost decisions must stay consistent

TLDR IT highlighted A10 AI Gateway, a central control plane intended to route requests, apply identity-based policy and usage limits, monitor activity, and manage costs across enterprise AI agents, applications, and large language models. Its stated support for on-premises, private-cloud, and air-gapped environments reflects the need to govern AI where the workload actually runs.

Enterprise AI gateway announcement Help Net Security

Open edition

Tools · August 14, 2026

Agent operations need shared traces when workflows cross clouds, models, and enterprise boundaries

TLDR IT reported that AWS AgentCore Observability can collect OpenTelemetry data from agents running on-premises, in Azure, Google Cloud, or AWS, then surface actions, token use, and reliability in one dashboard. The important pattern is not a single console; it is retaining an execution record that remains useful when an agent workflow spans several environments.

Cross-cloud AI agent observability guidance AWS Machine Learning Blog

Open edition

Agents · August 13, 2026

Enterprise agents need governed context when confident answers can still be wrong for reasons the model cannot see

TLDR IT highlighted a survey of 101 enterprises in which weak context sat behind many confidently incorrect agent answers. Organisations using governed semantic layers were substantially better at detecting those failures, reinforcing that an agent's source and interpretation path are part of its control plane.

Enterprise agent-context analysis VentureBeat

Open edition

Tools · August 13, 2026

Agentic applications need durable state boundaries when fast local work must remain aligned with the system of record

TLDR IT reported that Databricks acquired Electric, whose PGlite and synchronisation technology lets agents use fast local Postgres state while keeping it aligned with central databases. The signal is that agent performance does not remove the need for explicit state, reconciliation, and recovery design.

Agentic data-platform report The Register

Open edition

Agents · August 12, 2026

Agent programmes need owned orchestration decisions when outsourcing the reasoning layer can also outsource operational control

TLDR IT highlighted an argument that enterprise AI failures increasingly arise from agent governance and orchestration rather than model choice alone. The risk is not that a provider supplies useful components; it is losing clarity over how an agent chooses tools, applies policies, records decisions, and can be changed or stopped.

Enterprise agent-governance analysis The Register

Open edition

Security · August 12, 2026

Enterprise agents need inline policy decisions when risky prompts and tool interactions must be stopped before inference

TLDR IT reported that Cisco AI Defense can integrate with Claude Enterprise through Anthropic's inference hooks to inspect governed prompts and conversation content before inference. Cisco says the integration can block prompt injection, jailbreak, tool-exploitation, and sensitive-data risks across Claude, Claude Code, and Cowork, with the current hooks limited to pre-execution enforcement.

Enterprise AI security integration announcement Cisco

Open edition

Business · August 11, 2026

AI capacity plans need inference-first unit economics when production agents make compute a continuous operating demand

TLDR IT highlighted Gartner's forecast that AI-optimised IaaS spending will grow 96% to $42 billion in 2026, with inference overtaking training as the largest source of demand. The operational signal is that agentic and production workloads create sustained consumption, so capacity planning cannot stop at a one-time GPU procurement decision.

AI infrastructure spending forecast Gartner

Open edition