Search the archive

Grab your copy of the report

ANTHROPIC SIGNS $11.6 BILLION CLOUD DEAL WITH AKAMAI

Anthropic committed $11.6 billion over seven years to Akamai's cloud infrastructure to support growing CPU workloads. The agreement could expand by another $9 billion and includes warrants that could give Anthropic roughly a 5% stake in Akamai.

AWS BECOMES FIRST HYPERSCALER TO SECURE ‘NATO RESTRICTED' APPROVAL

Amazon Web Services has become the first hyperscaler to receive NATO Restricted approval, allowing member nations and defense partners to handle mission-critical restricted workloads across 15 qualifying AWS Regions. Evaluated by Spain's National Cryptographic Centre, the accreditation provides a pre-assisted security baseline and streamlined access to cloud capabilities for the alliance.

DATABRICKS ACQUIRES ROW ZERO FOR GOVERNED SPREADSHEETS

Databricks acquired Row Zero to bring a native spreadsheet interface to Genie, letting business teams analyze live enterprise data with built-in permissions and auditability. The planned integration supports familiar formulas and pivot tables while reducing reliance on exported files that lose governance controls.

THE HUMANOID LESSON, OR, WILL AI LEAVE ANYTHING FOR DATABASE RESEARCHERS TO DO?

Foundation models face the same tribal knowledge challenges as human workers rather than requiring specialized database architectures. Advances in general foundation models will continue to subsume custom agent harnesses, making standard software documentation practices the primary solution for semantic context.

UIPATH MAPS THE MISSING LAYER FOR ENTERPRISE AI WITH CARTOGRAPHER

UiPath announced Cartographer and the Map of Work at its FUSION 2026 event, introducing a new product designed to capture enterprise processes and generate governed process maps for AI agents and automations. The tool uses AI to absorb existing documentation, interview experts, and track decisions through a ledger to keep process maps continuously updated.

DEVIN NOW WORKS ACROSS MICROSOFT TEAMS AND MICROSOFT 365

Cognition has launched native support for @ mentioning Devin in Microsoft Teams alongside a first-party Microsoft 365 integration. The update allows Devin to participate directly in Teams chats, channels, and threads, as well as connect to mail, calendar, files, tasks, and directory services through Microsoft 365 MCP servers. The integrations feature delegated per-user permissions and resource-specific consent controls designed for security review.

DOCKER LAUNCHES CLOUD SANDBOXES FOR LONG-RUNNING AGENTS

Docker introduced managed cloud sandboxes that let coding agents keep working after developers disconnect, with a command to move sandbox files between local and cloud environments. Each agent runs in its own microVM, with configurable network access and usage-based compute pricing starting at $0.07 per hour.

UBUNTU MOVES TO WEEKLY KERNEL RELEASES AS CVES PILE UP

Canonical is replacing Ubuntu's existing kernel update cadence with overlapping two-week cycles that produce a release every week. The change aims to shorten patch delays as AI-assisted bug discovery and broader Linux CVE reporting increase the vulnerability backlog.

PINECONE BRINGS MANAGED VECTOR DATA TO CUSTOMER CLOUDS

Pinecone's Bring Your Own Cloud offering is generally available across AWS, Google Cloud, and Azure, keeping customer data and queries inside customer-controlled accounts. Pinecone manages upgrades and scaling through an outbound, pull-based mechanism without requiring standing inbound access to the environment.

KUBERNETES PATCHES WINDOWS KUBELET NTLM COERCION VIA SUBPATH

Kubernetes has fixed a medium-severity vulnerability designated CVE-2026-76654 in the Windows kubelet that could force NTLM authentication to an attacker-controlled network share.

ANDO TAKES ON SLACK

Ando is building team messaging designed for employees and AI agents to collaborate.

META BRINGS MUSE TO GLASSES AND UNVEILS $349 AUDIO FRAMES

Meta has announced plans to bring its Muse personal AI agent to its glasses, alongside new Ray-Ban Meta Audio frames starting at $349 and shipping October 13. The expanded lineup includes Ray-Ban Meta Gen 3 with improved battery life and controls, extending Meta's push toward hands-free AI assistance.

META UNVEILS $1,300 VR GLASSES WITH A PORTABLE WORKSPACE

Meta unveiled VR glasses weighing about 100 grams, with computing and battery hardware housed in a tethered puck, launching in Spring 2027 for $1,299.99. The device offers a private multi-screen workspace, virtual keyboard and touchpad, and photorealistic avatar calling through apps including Zoom and WhatsApp.

GOOGLE BRINGS OFFLINE AGENTS TO THE ANTIGRAVITY SDK

Google's Antigravity SDK now supports local models through LiteRT and compatible inference servers, enabling agents to run offline while keeping code on-device. Hybrid workflows can combine cloud-based planning with local execution to reduce API usage and limit sensitive data transfers.

AI AGENTS NEED A MORE INTEGRATED SECURITY OPERATIONS CENTER

Fragmented security tools force analysts and agents to rebuild context and coordinate actions across separate systems, slowing incident response. Microsoft's proposed answer is an integrated security operations center, now in Defender preview, that combines SIEM, threat protection, and response controls around shared context.

AI AGENTS EXPOSE THE CRACKS IN CLOUD INFRASTRUCTURE

Undocumented configurations and manual workarounds become operational risks when AI agents start managing infrastructure. Reliable automation requires infrastructure and policies defined in code, built-in cost and access controls, and clear boundaries for actions that need human approval.

Read the architecture breakdown

BARRACUDA LAUNCHES AI DATA SECURITY TO CONTROL WHAT EMPLOYEES SEND TO CHATBOTS

Barracuda launched AI Data Security to stop sensitive company data from reaching ChatGPT, Copilot, Gemini, and 1,300+ other AI tools. It adds prompt-injection screening, policy controls, and audit logs for SMBs and MSPs, available in October with SecureEdge Premium Access. A Barracuda survey found 49% of CIOs at 500 to 1,000 employee firms lack AI governance skills.

THE GENIE ONE MCP IS NOW GENERALLY AVAILABLE

Databricks made its Genie One MCP server generally available, giving any AI agent governed access to structured and unstructured data plus business context through Genie Ontology. The MCP runs as a managed service in Unity Gateway, adding centralized governance, fine-grained policies, and audit logging while keeping answers consistent across tools like Claude, ChatGPT, and Cursor. It aims to reduce agent sprawl by letting agents query data, retrieve results, and explore visualizations and citations without custom connectors.

WHAT DROPBOX HAS LEARNED FROM DEPLOYING AI AT COMPANY SCALE

Dropbox says scaling AI requires redesigning end-to-end workflows, aligning incentives, and measuring outcomes like revenue, quality, and retention. It reports ~70% AI-generated code, top-5% PR throughput versus similar peers, and quality in line with industry, while using internal coding agents like Nova to connect AI spend to engineering value. Leaders argue that as AI lowers engineering costs, human problem-solving, judgment, and leadership matter more, and trusted organizational context will separate effective adopters.

TOPOLOGY-AWARE WORKLOAD SCHEDULING WITH NVIDIA TOPOGRAPH

NVIDIA Topograph is an open source toolkit that discovers cluster network topology from cloud or on-premises providers and normalizes it into a common model. It publishes that topology as Kubernetes node labels, Slurm configurations, Slinky ConfigMaps, or NFD resources so schedulers like KAI Scheduler, Kueue, and native Kubernetes can place tightly coupled GPU workloads near each other. By keeping topology current as clusters change, Topograph reduces network congestion and improves AI factory efficiency, tokens per watt, and cost across Kubernetes, Slurm, and Slinky environments.

MICROSOFT PLANS $10B-PLUS MIDDLE EAST CLOUD INVESTMENT

Microsoft plans to invest more than $10 billion through 2030 across Kuwait, Qatar, Saudi Arabia, and the UAE to expand cloud and AI infrastructure. Its commitments also include more than $400 million for network connectivity, alongside sovereign cloud capabilities and business continuity programs.

ACCELERATED SERVER SALES ARE THEMSELVES ACCELERATING

Q2 2026 server sales surged 52% year over year to $166.32 billion.

NEW SURFACE BUSINESS PCS ARRIVE OCTOBER 13

Microsoft's refreshed 12-inch Surface Pro and 13-inch Surface Laptop bring Snapdragon X2 Plus processors, local AI capabilities, and enterprise management tools.

MICROSOFT BRINGS AI-READY CAPABILITIES ACROSS ITS INDIA CLOUD INFRASTRUCTURE

Microsoft announced the launch of its new India South Central datacenter region in Hyderabad, designating it as a strategic hub for Asia and the Global South. The facility features AI-ready infrastructure, a resilient three-zone architecture, and zero-water mechanical cooling, advancing the company's US$20.5 billion investment in the country's cloud and AI capabilities.

MUSE, META'S EXTRAORDINARILY PRIVILEGED AI ASSISTANT, HAS A SERIOUS 0-DAY

A vulnerability in Meta's new macOS AI assistant allowed local apps or commands to redirect traffic, steal the user's Muse token, and effectively inherit the agent's access to files, camera, messages, and connected services. Meta has issued a hotfix, but the bigger lesson is that desktop AI agents with broad permissions create a new privileged endpoint that needs the same scrutiny as remote management and admin tooling.

HOW WE DEPLOYED POST-QUANTUM TLS WITHOUT ANY CODE CHANGES

1Password explains how it extended hybrid post-quantum TLS across its first-party clients and services using an AWS load-balancer policy and a cryptographic-provider dependency change rather than rewriting application code. The interesting takeaway is less about quantum computing today and more about cryptographic agility: teams that keep crypto implementation separated from application logic can upgrade foundational security much faster.

GARTNER PREDICTS 55% OF ENTERPRISE VMWARE USERS WILL BE INVESTIGATING AN EXIT BY 2029

Gartner expects 55% of enterprises to begin proofs of concept for alternatives to VMware-based distributed infrastructure by 2029, up from 25% in 2026. VMware remains rated strongly on technology, but pricing changes, licensing complexity, support concerns, and migration timelines are pushing infrastructure teams to at least evaluate alternatives rather than automatically renew.

VAST DATA LAUNCHES CONFIDENTIAL COMPUTING SERVICE FOR SENSITIVE WORKLOADS

Vast Data Inc. has announced DataEnclave, a confidential computing environment designed to allow enterprises to run advanced artificial intelligence models against sensitive data without exposing intellectual property. The new capability integrates with Nvidia Corp.'s confidential computing technology and uses hardware-isolated environments to encrypt guest memory, GPU memory, and NVLink traffic.

JAMF + RAVENNA: GIVE EMPLOYEES A SIMPLER WAY TO GET MAC SUPPORT

Jamf and Ravenna are integrating Jamf Pro device data and IT runbooks directly into an AI service desk in Slack. Agents can inspect device state, troubleshoot issues, retrieve FileVault recovery keys, and trigger remote-lock workflows, with IT able to require confirmation or approvals before sensitive actions run.

PALO ALTO NETWORKS UNVEILS AI-POWERED CYBERSECURITY SERVICE USING CLAUDE, GPT MODELS

Palo Alto Networks launched Unit 42 Continuous Frontier AI Defense, using frontier and open-weight models to continuously assess web applications, APIs, and cloud environments for vulnerabilities and attack paths. The service can also recommend remediation such as code changes and virtual patches, showing how quickly AI-assisted offensive security is becoming a commercial enterprise product category.

THE LETHAL TRIFECTA IN PRODUCTION: HOW ENTERPRISE COPILOTS QUIETLY BECAME EXFILTRATION TOOLS

Enterprise AI copilots face systemic data-exfiltration risks due to a "lethal trifecta," where a model accesses private data, processes untrusted content, and retains an outbound communication path. Documented vulnerabilities like EchoLeak in Microsoft 365 Copilot and ForcedLeak in Salesforce Agentforce demonstrate that attackers can exploit these flows via zero-click emails or public lead forms. Defenses must be structural, combining least-privilege scoping, deliberate rule-of-two limitations, and explicit outbound access controls rather than relying on classifiers or allowlists.

THE NEW MAC MINI AND MAC STUDIO ARE AVAILABLE TODAY

Apple's new Mac mini with M6 or M5 Pro and Mac Studio with M5 Max or M5 Ultra are now shipping. Apple is increasingly pitching these systems not just as employee desktops but as local AI compute, which could become relevant for companies evaluating on-device models, private inference, development workloads, and alternatives to usage-based cloud AI.

MICROSOFT REMINDS ADMINS TO MIGRATE ENTRA ID USERS TO PASSKEYS

SMS first-factor sign-in is being retired beginning in February, and Microsoft is pushing enterprises toward phishing-resistant methods such as passkeys and FIDO2 security keys.

GOOGLE CLOUD ADDS NEW CONTROLS TO SECURE CI/CD PIPELINES

Google Cloud added new generally available Secure Source Manager capabilities aimed at protecting source repositories and CI/CD workflows from unauthorized changes and software supply-chain attacks.

→ Register now

JEV BECOMES VERCEL'S FASTEST-ADOPTED AI MODEL

Jev, TypeSafe AI's new model for making structured software decisions instead of generating text, became the fastest-adopted model in Vercel AI Gateway history. Nearly 13% of paid teams used it within 24 hours, highlighting growing demand for specialized models that handle agent routing, verification, and workflow decisions.

NVIDIA LAUNCHES CERTIFICATION PROGRAM FOR AI DATA CENTER POWER AND COOLING

Nvidia has launched DSX Ready, a program that qualifies power and cooling systems for large AI factories. The initiative aims to help data center operators deal with increasingly tight power, cooling, water, and grid constraints as AI infrastructure scales.

REVOKING THE TOKEN DIDN'T KILL THE BACKDOOR

Traditional incident response steps like revoking OAuth tokens fail when an implant can dynamically replace its entire credential set and OneDrive command-and-control identity via a single remote task. Investigators should treat application registrations as the durable object of compromise rather than relying solely on token revocation, and hunt on the identity plane using cloud telemetry.

WHO OWNS THE DATA?

Data ownership is fundamentally about accountability for business meaning, rules, and quality rather than technical possession or storage. While different teams across an organization may store, move, or consume data, business stakeholders remain responsible for defining its rules and metrics. Roles such as data owners, data stewards, and data custodians are distinct in managing enterprise data.

personal and family plans are 50% off. Get your savings

VMWARE HAS QUIETLY WALKED BACK ITS SMARTNIC AMBITIONS

VMware has quietly stopped selling its distributed firewalls for SmartNICs, walking back ambitions to bring hyperscale networking models to on-premise private clouds. The effort involved complex microcode integration with hardware from AMD and Nvidia, but struggled with Intel chips and ultimately failed to attract paying customers as conventional NICs improved. While standalone SmartNIC sales have ended, VMware's Distributed Services Engine remains supported within its Cloud Foundation suite.

FASTLY LAUNCHES RUNTIME CONTROLS FOR ENTERPRISE AI

Fastly launched AI Runtime Control and AI Firewall to manage model access, spending, routing, and agent interactions from its edge platform. The company says machine-generated traffic now accounts for more than half of traffic across its network.

PRESIDIO OPENS ENTERPRISE AI INFRASTRUCTURE LAB

Presidio opened its PATH AI lab to customers, allowing companies to test workloads across private cloud, public cloud, and neocloud infrastructure before committing to production deployments. The lab includes Dell servers running Nvidia B300 and RTX PRO 6000 GPUs.

HOW ATLASSIAN BUILT A SCALABLE SYNTHETIC DATA ENGINE

Atlassian's Data Brewery is a scalable synthetic data engine designed to generate high-volume, product-shaped, and relationally correct datasets. The system addresses the challenge of producing realistic customer data for products like Jira and Confluence in a maintainable and extensible way for engineers.