Tools | Vanderburgh.it

Security · September 9, 2026

AI-assisted secret triage becomes trustworthy when its attribution and risk reasoning remain visible and remediation stays human-owned

GitGuardian says Public Secrets Monitoring now runs two AI agents and deep analysis on every public GitHub and Docker Hub incident, returning a company-related verdict, risk score, and visible reasoning. The company reports that AI-service credentials reached 1.27 million exposed instances last year, and that 24,008 unique secrets appeared in public MCP configuration files. New workspaces receive the analysis by default, with existing workspaces rolling out gradually; the workflow does not close incidents automatically.

Public-secret monitoring product announcement GitGuardian

Open edition

Agents · September 8, 2026

Self-hosted coding-agent workers improve execution control only when the cloud control plane and data flows remain explicit

Cursor has introduced Self-Hosted Machines, allowing Cloud Agents to execute tool calls on dynamically scheduled workers inside a team's network while Cursor continues to run the agent loop, planning, and inference. Workers keep a long-lived outbound HTTPS connection to Cursor; they can be organised into shared pools that scale with queued work and serve multiple repositories. Cursor notes that tool output may include code and that agent transcripts may be processed and stored in its cloud.

Self-hosted agent-worker product announcement Cursor

Open edition

Security · September 3, 2026

Frontier-model safeguards become easier to operationalise when monitoring evidence remains in the customer-controlled cloud boundary

Anthropic has announced Enterprise Frontier Safeguards, combining zero data retention with automated detection of serious misuse. The service is designed to keep monitoring data in cloud infrastructure controlled by the customer, with customer-managed encryption keys and automated review available as opt-in controls. Anthropic says rollout will begin in phases later this fall across Claude products and supported cloud platforms.

Enterprise safeguard announcement Anthropic

Open edition

Agents · September 3, 2026

Agent governance needs a complete inventory before teams can judge ownership, permissions, and blast radius

Okta has added AI-agent discovery to all existing Identity Security Posture Management subscriptions. Its inventory can surface endpoint agents and MCP servers, builder-platform agents, OAuth grants, and shadow AI applications, then place agent-related misconfigurations alongside other identity risks. Some discovery sources remain Early Access or planned, so coverage should be validated against the organisation's actual endpoints and builder platforms.

Identity Security Posture Management product announcement Okta

Open edition

Security · September 2, 2026

Agentic operations need a governed execution model when analysis can turn directly into enterprise action

Palo Alto Networks has acquired Console, an AI-native platform designed for agentic workflows across enterprise operations. Palo Alto Networks says Console will deepen Cortex capabilities that help teams investigate signals, prioritise work, and act across their environment; the announcement describes natural-language workflows that can automate alerts, issues, and requests.

Agentic operations acquisition announcement Palo Alto Networks

Open edition

Security · September 1, 2026

AI gateways become operationally useful when model access, tools, and network permissions can be governed through one identity-aware control point

Tailscale has made Aperture generally available for securing and managing AI agents and LLM sessions. Its documented controls include model access and spend controls, request and response hooks, guardrails, logging, MCP support, API proxying, and approval-based access to tailnet nodes and SSH resources.

AI gateway general-availability announcement Tailscale

Open edition

Tools · September 1, 2026

Coding-agent rollouts need a migration path when a model provider can change the terms of a familiar developer tool

OpenAI says it plans to wind down its contract providing OpenAI models to Cursor and has proposed a transition period through November 12, 2026; Cursor could choose to end access sooner. OpenAI documents two continuation paths inside Cursor: bring an API key for local Chat and Agent features, or use the Codex IDE extension with a ChatGPT subscription or API key.

Official product-transition guidance OpenAI

Open edition

Security · August 26, 2026

MCP access becomes easier to govern when each agent connection inherits identity-provider policy and the user’s existing role

Supabase has made enterprise-managed authentication generally available for its MCP server on Team and Enterprise plans. With SSO and a supported identity provider, an administrator can authorize a client centrally while each employee’s access remains limited to their existing Supabase role and project permissions. Supabase documents short-lived, non-refreshable access tokens and central revocation through Authorized Apps.

Enterprise-managed MCP authentication announcement and documentation Supabase

Open edition

Infrastructure · August 25, 2026

Agent platforms need an inference design that reflects long, multi-step workloads rather than relying on a generic model benchmark

NVIDIA says Groq 3 LPX is now in production as an extension of the Vera Rubin platform, with Nebius as the first committed cloud adopter. The accelerator is aimed at fast token generation for long-context, multi-step agent workloads where repeated model calls can turn inference latency into the limit on the whole business process.

Agent-inference platform announcement NVIDIA

Open edition

Business · August 25, 2026

Domain-owned models can change professional AI economics when control and specialised evaluation matter more than maximum generality

Thomson Reuters has launched Thomson, an internally developed model built from an open-source foundation and specialised with its professional content and subject-matter expertise. The company controls the model and is putting it into legal workflows, presenting a different route from relying exclusively on third-party frontier models plus retrieval.

Domain-specific model announcement Thomson Reuters

Open edition

Tools · August 19, 2026

Copilot adoption needs a coherent user entry point while work identity and tenant controls remain distinct

TLDR IT reported that Microsoft started unifying its consumer and Microsoft 365 Copilot experiences on August 18, ahead of a broader application overhaul. Personal and work use still separate through Microsoft and Entra identities, preserving the enterprise tenant and compliance boundary. The useful change is not simply a new interface: it reduces the chance that users treat personal and governed work AI as interchangeable products.

Copilot product-consolidation report Computerworld

Open edition

Tools · August 18, 2026

Agent operations need end-to-end observability when model behaviour becomes part of the production incident path

TLDR IT reported Dynatrace's plan to acquire Arize for roughly $915 million. Arize brings visibility into model outputs, agent behaviour, and tool use; Dynatrace contributes application and infrastructure telemetry. Together, that points to a practical requirement: teams must be able to follow an agent failure from a surprising output or tool call through the affected service, transaction, and customer workflow.

AI observability acquisition report DevOps.com

Open edition

Agents · August 18, 2026

Enterprise agents need bounded autonomy when a useful action can also change a real business outcome

TLDR IT highlighted a pragmatic operating pattern for enterprise agents: define narrow tool permissions, verification checks, durable audit trails, staged rollout, cost and step limits, and human approval where impact is higher. These controls do not make an agent less useful; they make the difference between a demonstrator and a service that can be trusted with consequential work.

Enterprise agent-governance analysis InfoWorld

Open edition

Tools · August 17, 2026

AI meeting capture needs an explicit consent and record-ownership pattern when notes move from video calls into the room

TLDR IT highlighted Google's expansion of Meet's "Take notes for me" to in-person conversations. Gemini can capture a discussion from the Meet home screen and create a structured summary, action items, and transcript in a Google Doc. The useful operational shift is not only automated note-taking; it is making the meeting record, its access, and its correction path deliberate from the start.

AI meeting-notes feature announcement Google Workspace Updates

Open edition

Security · August 14, 2026

Enterprise agents need a central control plane when routing, identity, policy, and cost decisions must stay consistent

TLDR IT highlighted A10 AI Gateway, a central control plane intended to route requests, apply identity-based policy and usage limits, monitor activity, and manage costs across enterprise AI agents, applications, and large language models. Its stated support for on-premises, private-cloud, and air-gapped environments reflects the need to govern AI where the workload actually runs.

Enterprise AI gateway announcement Help Net Security

Open edition

Tools · August 14, 2026

Agent operations need shared traces when workflows cross clouds, models, and enterprise boundaries

TLDR IT reported that AWS AgentCore Observability can collect OpenTelemetry data from agents running on-premises, in Azure, Google Cloud, or AWS, then surface actions, token use, and reliability in one dashboard. The important pattern is not a single console; it is retaining an execution record that remains useful when an agent workflow spans several environments.

Cross-cloud AI agent observability guidance AWS Machine Learning Blog

Open edition

Business · August 13, 2026

Production AI needs workload-level cost accountability when inference becomes a continuous operating expense

TLDR IT reported that two-thirds of surveyed enterprises now run AI workloads in production, while many still lack visibility into infrastructure costs and utilisation. As inference becomes a continuous expense, an AI service cannot be managed responsibly from aggregate cloud spend or a one-off pilot budget alone.

Enterprise AI cost-management report VentureBeat

Open edition

Tools · August 13, 2026

Agentic applications need durable state boundaries when fast local work must remain aligned with the system of record

TLDR IT reported that Databricks acquired Electric, whose PGlite and synchronisation technology lets agents use fast local Postgres state while keeping it aligned with central databases. The signal is that agent performance does not remove the need for explicit state, reconciliation, and recovery design.

Agentic data-platform report The Register

Open edition

Agents · August 12, 2026

Agent programmes need owned orchestration decisions when outsourcing the reasoning layer can also outsource operational control

TLDR IT highlighted an argument that enterprise AI failures increasingly arise from agent governance and orchestration rather than model choice alone. The risk is not that a provider supplies useful components; it is losing clarity over how an agent chooses tools, applies policies, records decisions, and can be changed or stopped.

Enterprise agent-governance analysis The Register

Open edition

Security · August 12, 2026

Enterprise agents need inline policy decisions when risky prompts and tool interactions must be stopped before inference

TLDR IT reported that Cisco AI Defense can integrate with Claude Enterprise through Anthropic's inference hooks to inspect governed prompts and conversation content before inference. Cisco says the integration can block prompt injection, jailbreak, tool-exploitation, and sensitive-data risks across Claude, Claude Code, and Cowork, with the current hooks limited to pre-execution enforcement.

Enterprise AI security integration announcement Cisco

Open edition