Daily Edition · Page 13

THE DAILY INDEX

Technology, AI, software, security, crypto and business

NEWS & TRENDS

TLDR IT

HOW WE DEPLOYED POST-QUANTUM TLS WITHOUT ANY CODE CHANGES

1Password explains how it extended hybrid post-quantum TLS across its first-party clients and services using an AWS load-balancer policy and a cryptographic-provider dependency change rather than rewriting application code. The interesting takeaway is less about quantum computing today and more about cryptographic agility: teams that keep crypto implementation separated from application logic can upgrade foundational security much faster.

GARTNER PREDICTS 55% OF ENTERPRISE VMWARE USERS WILL BE INVESTIGATING AN EXIT BY 2029

Gartner expects 55% of enterprises to begin proofs of concept for alternatives to VMware-based distributed infrastructure by 2029, up from 25% in 2026. VMware remains rated strongly on technology, but pricing changes, licensing complexity, support concerns, and migration timelines are pushing infrastructure teams to at least evaluate alternatives rather than automatically renew.

VAST DATA LAUNCHES CONFIDENTIAL COMPUTING SERVICE FOR SENSITIVE WORKLOADS

Vast Data Inc. has announced DataEnclave, a confidential computing environment designed to allow enterprises to run advanced artificial intelligence models against sensitive data without exposing intellectual property. The new capability integrates with Nvidia Corp.'s confidential computing technology and uses hardware-isolated environments to encrypt guest memory, GPU memory, and NVLink traffic.

PALO ALTO NETWORKS UNVEILS AI-POWERED CYBERSECURITY SERVICE USING CLAUDE, GPT MODELS

Palo Alto Networks launched Unit 42 Continuous Frontier AI Defense, using frontier and open-weight models to continuously assess web applications, APIs, and cloud environments for vulnerabilities and attack paths. The service can also recommend remediation such as code changes and virtual patches, showing how quickly AI-assisted offensive security is becoming a commercial enterprise product category.

THE LETHAL TRIFECTA IN PRODUCTION: HOW ENTERPRISE COPILOTS QUIETLY BECAME EXFILTRATION TOOLS

Enterprise AI copilots face systemic data-exfiltration risks due to a "lethal trifecta," where a model accesses private data, processes untrusted content, and retains an outbound communication path. Documented vulnerabilities like EchoLeak in Microsoft 365 Copilot and ForcedLeak in Salesforce Agentforce demonstrate that attackers can exploit these flows via zero-click emails or public lead forms. Defenses must be structural, combining least-privilege scoping, deliberate rule-of-two limitations, and explicit outbound access controls rather than relying on classifiers or allowlists.

TLDR IndexPage 13