Security · October 10, 2026
Agent policies should consider action history and make coverage gaps explicit
AWS has released Strands Box in developer preview, starting on macOS. It combines operating-system containment with Dogwood policies evaluated at network, shell, Python, and MCP enforcement points. Those checks can use a shared action history, such as blocking outbound requests after a sensitive file read. AWS says file paths granted directly to the agent are bounded by containment but do not appear in that policy history, so policy coverage depends on how the agent reaches a resource.
Official AWS Strands Box developer-preview announcement
AWS
Open edition
Security · October 9, 2026
Advanced AI-assisted cyber work is more governable when access is tied to a verified defender, an authorised scope, and monitoring proportionate to the capability
Anthropic has combined earlier cyber-access efforts into an expanded Cyber Verification Program with Defense Access, Red Team Access, and Specialized Access. It says qualifying security organisations can apply for access appropriate to defensive or authorised adversarial work; each tier has verification requirements and controls, and Anthropic retains blocks for high-risk activity such as ransomware deployment, physical-system damage, or testing high-risk safety systems.
Official Anthropic Cyber Verification Program announcement
Anthropic
Open edition
Agents · October 7, 2026
Enterprise context becomes more actionable when a model can work through a permissioned collaboration layer instead of relying on copied fragments of work
OpenAI and Atlassian have announced an expanded partnership that brings GPT-6 models across the Atlassian platform and Rovo. OpenAI describes Rovo as connecting its AI to Atlassian's Teamwork Graph, an enterprise context layer linking people, projects, documents, and decisions. The companies say the arrangement builds on their 2023 relationship and will support agents across the platform; implementation, product availability, and entitlement remain matters to confirm in each environment.
Official OpenAI partnership announcement
OpenAI
Open edition
Business · October 7, 2026
Agent output is easier to govern when plans, sessions, reviews, and outcomes remain attached to the delivery record rather than scattered across private tool sessions
Atlassian's October 7 overview describes current, beta, and early-access AI-native software-delivery features including Code Context, Planner, agent integrations in Jira, Agent Sessions, AI Review, and a DX AI Measurement solution. Atlassian says these capabilities are intended to connect agent work to the Teamwork Graph and delivery workflow; availability varies by feature and some named capabilities are not generally available.
Official Atlassian AI-native SDLC announcement
Atlassian
Open edition
Agents · October 6, 2026
A multi-cloud agent estate becomes easier to govern when every agent has a distinct identity, a task-scoped access path, and an audit trail separate from its builder or requester
IBM says its watsonx Orchestrate AI Gateway can now discover and import agents built on Microsoft Foundry and Google Gemini Enterprise Agent Platform, alongside Amazon Agentcore agents, into one control plane. Its preview Agent Identity capability assigns an agent a distinct, verifiable identity through an existing identity provider; IBM says this can support task-scoped short-lived tokens and audit records that connect the requesting user, the acting agent, and the called tool. The private preview supports IBM Verify and Microsoft Entra.
Official IBM watsonx Orchestrate announcement
IBM
Open edition
Business · October 6, 2026
AI deployment capability becomes more durable when a named engineer returns to a real use case with security review, evidence, and handover already part of the work
Anthropic has announced Claude Frontier Academy, backed by a $100 million commitment and intended to train 10,000 Frontier Deployed Engineers by the end of 2027. Its Frontier Deployed Engineer Residency starts with an in-person programme and a simulated enterprise deployment, then a 12-week residency in which participants lead a real Claude use case at their organisation. Anthropic says the curriculum covers the path from selecting a use case through security review to handover; participation is by nomination and initial cohorts include enterprises and consulting firms.
Official Anthropic Frontier Academy announcement
Anthropic
Open edition
Infrastructure · October 4, 2026
A continuous AI improvement loop needs a durable link between production traces, curated evidence, evaluation results, and the deployment that changed
CoreWeave has introduced Forge, a development environment intended to connect the stages of an AI improvement cycle: running models and agents in production, observing traces and feedback, curating data and evaluation suites, improving a model or harness, and evaluating a version before deployment. The launch includes Agent Lens, model distillation, managed notebooks, ARIA, sandboxes, inference, and a registry. CoreWeave describes the platform as open to different models, frameworks, and clouds, while positioning it as a connected system of record for datasets, evaluations, model versions, traces, and deployments.
Official CoreWeave Forge announcement
CoreWeave
Open edition
Business · October 4, 2026
Agent outputs become more dependable when the semantic definitions behind metrics and business terms can move with the workload instead of being rebuilt per tool
Apache Ossie is an open-source effort to standardise how semantic models are exchanged across analytics, BI, and AI platforms. Its project describes a JSON- and YAML-based specification designed to carry consistent business definitions between tools, with core specification, schema, converters, examples, and validation tooling. The aim is to reduce repeated reconciliation of measures and business logic when data moves between systems or reaches AI agents.
Apache Ossie open-source project and specification
Apache Ossie
Open edition
Security · October 3, 2026
AI-era vulnerability defence needs an exposure-led queue that links discovery speed to exploit evidence and accountable remediation
Google Threat Intelligence Group examined disclosure and in-the-wild exploitation from January 2025 through August 2026 and says artificial intelligence is changing both the pace and the risk profile of discovered vulnerabilities. It reports that monthly disclosures rose from 5,045 in January 2026 to 10,740 in August, while observed exploitation increased from an average of 10.5 vulnerabilities a month in 2025 to 18 a month in 2026. The report also notes that only about 0.23% of 2026 disclosures were observed in active exploitation, and identifies AI middleware as an emerging attack surface.
Google Threat Intelligence Group analysis
Google Cloud
Open edition
Agents · October 2, 2026
Persistent agents need explicit action boundaries and a review path that survives the move from one task to the next
OpenAI has introduced dots: always-on agents powered by GPT-6 Astra that have their own cloud computer and browser, can use connected tools, and can continue work between conversations. OpenAI says users can set boundaries through permissions and Custom Rules; its safeguards include pre-action Auto-review and ongoing safety monitoring. Enterprise availability begins as an admin-enabled beta, initially off by default.
Official GPT-6 Astra system card and dots safeguards documentation
OpenAI
Open edition
Security · October 1, 2026
Agent constraints need an independent enforcement point that can still observe and stop work when the agent runtime cannot be trusted
NVIDIA has published its Open Agent Safety Platform, a reference design that uses the Apache 2.0-licensed OpenShell runtime to sandbox autonomous agents with kernel-level isolation. Operators can define permitted files, networks, tools, processes, and credentials as policy before execution. The optional NVIDIA Sentry layer runs on BlueField data processing hardware, correlating agent interactions and policy decisions while providing monitoring and enforcement outside the host resources available to the agent.
Official Open Agent Safety Platform announcement
NVIDIA
Open edition
Security · September 23, 2026
Runtime AI controls are most useful when the same request path can govern model choice, prompt risk, spend, and what agents may do through enterprise APIs
Fastly has announced AI Runtime Control, AI Firewall, and expanded API Security capabilities. AI Runtime Control routes requests to public or self-hosted model providers through a single endpoint, using virtual keys to protect provider credentials and applying visibility, rate limits, budget controls, and failover. The optional AI Firewall inspects prompts for LLM-targeted attacks, while API Security can enforce API contracts for agentic and conventional traffic so teams can observe or block non-conforming requests.
Official AI Runtime Control, AI Firewall, and API Security announcement
Fastly
Open edition
Security · September 19, 2026
AI oversight needs an evidence loop for concerning behaviour, including near misses that challenge assumptions about safeguards
OpenAI has introduced a framework for tracking, investigating, and publicly disclosing qualifying examples of model misalignment, accompanied by six reports from the preceding six months. It covers behaviour across training, evaluation, testing, and deployment, including unauthorized action, coordination, oversight evasion, safeguard failures, and findings that challenge a published safety claim. OpenAI says an example can merit disclosure before its broader significance or mitigation is fully understood.
Official model-misalignment reporting framework
OpenAI
Open edition
Agents · September 15, 2026
A managed agent harness reduces orchestration work, but the environment that can execute tools remains an enterprise security boundary
OpenAI has introduced the Agents API in public beta, making the harness behind Codex available as a managed API. The service handles long-running session orchestration, context compaction and recovery, while developers define the task, model, tools, and environment. It supports durable sessions and can run work in OpenAI-hosted sandboxes or a sandbox connected from the customer's own infrastructure or a supported provider.
Official Agents API public-beta announcement
OpenAI
Open edition
Agents · September 11, 2026
Coding agents modernize legacy systems more safely when numerical parity, module boundaries, and human review are designed before the first automated change
Mistral describes helping a European energy operator migrate 40,000 lines of a physics-intensive Fortran 77 reservoir simulator to C++. The team first created a harness that exports legacy-state checkpoints and tests the C++ implementation against them, then used agents to document the caller-callee tree and work through independently scoped modules. Mistral says fully autonomous translation produced functional but unmodernized code; the final workflow used planner, coder, tester, and reviewer roles, with reservoir-engineer approval of architecture and human review of pull requests.
Applied-AI legacy-modernization case study
Mistral
Open edition
Security · September 9, 2026
AI-assisted secret triage becomes trustworthy when its attribution and risk reasoning remain visible and remediation stays human-owned
GitGuardian says Public Secrets Monitoring now runs two AI agents and deep analysis on every public GitHub and Docker Hub incident, returning a company-related verdict, risk score, and visible reasoning. The company reports that AI-service credentials reached 1.27 million exposed instances last year, and that 24,008 unique secrets appeared in public MCP configuration files. New workspaces receive the analysis by default, with existing workspaces rolling out gradually; the workflow does not close incidents automatically.
Public-secret monitoring product announcement
GitGuardian
Open edition
Agents · September 8, 2026
Self-hosted coding-agent workers improve execution control only when the cloud control plane and data flows remain explicit
Cursor has introduced Self-Hosted Machines, allowing Cloud Agents to execute tool calls on dynamically scheduled workers inside a team's network while Cursor continues to run the agent loop, planning, and inference. Workers keep a long-lived outbound HTTPS connection to Cursor; they can be organised into shared pools that scale with queued work and serve multiple repositories. Cursor notes that tool output may include code and that agent transcripts may be processed and stored in its cloud.
Self-hosted agent-worker product announcement
Cursor
Open edition
Security · September 3, 2026
Frontier-model safeguards become easier to operationalise when monitoring evidence remains in the customer-controlled cloud boundary
Anthropic has announced Enterprise Frontier Safeguards, combining zero data retention with automated detection of serious misuse. The service is designed to keep monitoring data in cloud infrastructure controlled by the customer, with customer-managed encryption keys and automated review available as opt-in controls. Anthropic says rollout will begin in phases later this fall across Claude products and supported cloud platforms.
Enterprise safeguard announcement
Anthropic
Open edition
Agents · September 3, 2026
Agent governance needs a complete inventory before teams can judge ownership, permissions, and blast radius
Okta has added AI-agent discovery to all existing Identity Security Posture Management subscriptions. Its inventory can surface endpoint agents and MCP servers, builder-platform agents, OAuth grants, and shadow AI applications, then place agent-related misconfigurations alongside other identity risks. Some discovery sources remain Early Access or planned, so coverage should be validated against the organisation's actual endpoints and builder platforms.
Identity Security Posture Management product announcement
Okta
Open edition
Security · September 2, 2026
Agentic operations need a governed execution model when analysis can turn directly into enterprise action
Palo Alto Networks has acquired Console, an AI-native platform designed for agentic workflows across enterprise operations. Palo Alto Networks says Console will deepen Cortex capabilities that help teams investigate signals, prioritise work, and act across their environment; the announcement describes natural-language workflows that can automate alerts, issues, and requests.
Agentic operations acquisition announcement
Palo Alto Networks
Open edition