Daily Edition · Page 14

THE DAILY INDEX

Technology, AI, software, security, crypto and business

Paid placements from today’s newsletters

Sponsored

KEEP CREDENTIALS OUT OF YOUR AGENT'S CONTEXT

An agent that reads a web page, a Jira comment, or an inbox can pick up instructions an attacker wrote. If a Slack or Salesforce token is sitting in that same process, it's exposed too. Here's how you can keep credentials away from agents with WorkOS [5]: >> PIPES handles OAuth, token refresh, and encrypted credential storage behind a drop-in widget. >> RELAY, now in early access, routes your agent's API calls through WorkOS, which attaches the credential server-side [6] and restricts requests to allowed provider hosts. Permissions and other outbound paths still need their own controls.

PRODUCTS THAT MATTER. DEDICATED LEARNING TIME. REAL STABILITY.

Looking to build your technology career in an environment where [5]tech investment is a constant [6]? Discover what it's like to build at Fidelity: * Systems with a broad reach: Architect, design, and deploy platforms powering financial security for millions. * Continuous learning: Dedicated time during work hours for [7]upskilling, certifications, and experimentation [8]. * Solid foundation: Startup-level tech ambition backed by a long history of organizational stability. Build a career that keeps moving forward. [9]Find out more about working in tech at Fidelity [4]. Fidelity is an equal opportunity employer.

LIGHTNING: IDENTITY SECURITY FOR THE AI ERA

Identity attacks quickly become business crises. The SEMPERIS LIGHTNING PLATFORM [5] helps you STRENGTHEN SECURITY POSTURE AND READINESS while ACCELERATING INCIDENT DETECTION AND RESPONSE—so critical business operations can continue through cyber disruption. * Assess identity exposures across multi-forest, multi-tenant environments * Detect and disrupt both conventional and agentic identity attacks * Manage incident response from a single workflow AI ATTACKS MOVE AT MACHINE SPEED. YOUR DEFENSES NEED TO MOVE FASTER. Discover how Lightning empowers rigorous defense and recoverability of your identity infrastructure.

REAL-TIME PIPELINES FOR CLEAN DATA

Stakeholders often spot broken data before the data team does. According to a Monte Carlo/Wakefield survey, 74% of organizations now report it. The failure is usually the ingestion path, not the dashboard. ‘Building a real-time data transport layer with Confluent Cloud and AWS' demonstrates the change-data-capture transport pattern. Read the tutorial in AWS Marketplace [5]. The Data Pipelines and Lineage guide goes a level up from the tutorial: lineage from source to AI agent response, data quality, pipeline observability. See the data pipeline patterns [6].

HOW FINANCIAL SERVICES COMPANIES ARE PREVENTING FRONTIER-MODEL ATTACKS

Armed with the latest AI models, attackers can find and exploit vulnerabilities in finservs and fintechs faster than ever before. Mean time-to-exploit has collapsed from 63 days in 2018 to -7 days in 2025. A prevention-first approach is quickly becoming the safest path forward. Chainguard [5] partners with industry leaders, including G-SIBs, fintechs, and investment firms, to move their security posture left and prevent malware, zero-days, and CVE exploits. > PREVENT CHAINED CVE EXPLOITS AND ZERO-DAY ATTACKS with 97.6% average CVE reduction [6]. > REMEDIATE CVES AND MALWARE IN LANGUAGE DEPENDENCIES with 615k+ malicious packages blocked. > MAINTAIN CONTINUOUS, AUDIT-READY COMPLIANCE with SBOMs and full provenance.

TLDR IndexPage 14