Before we hand over the keys
This week’s AI reading on agent identities, kill switches and offline training, and why the hard question is how much authority to delegate to agents.
This week’s AI reading on agent identities, kill switches and offline training, and why the hard question is how much authority to delegate to agents.
ServiceNow has launched a ChatGPT plugin and expanded its OpenAI partnership to cover security tools, Codex app building and voice-driven AI risk assessments.
OpenAI has described a layered system for monitoring frontier agents, saying a replay of the Hugging Face incident would have raised an alert 30 hours earlier.
Arctic Wolf says agentic AI resolves 60% of investigations in its Aurora SOC, with human-only cases down to 2% from 81% a year earlier, per its 2026 report.
This week’s AI reading on agent identities, kill switches and offline training, and why the hard question is how much authority to delegate to agents.
ServiceNow has launched a ChatGPT plugin and expanded its OpenAI partnership to cover security tools, Codex app building and voice-driven AI risk assessments.
OpenAI has described a layered system for monitoring frontier agents, saying a replay of the Hugging Face incident would have raised an alert 30 hours earlier.
Arctic Wolf says agentic AI resolves 60% of investigations in its Aurora SOC, with human-only cases down to 2% from 81% a year earlier, per its 2026 report.
Report Fraud logged more than 1,300 AI-enabled investment scams from January to August 2026, with £24.3m lost and over-60s making nearly 80% of reports.
OpenAI and Oracle are bringing Oracle applications and data into ChatGPT through Oracle AI Workspace, and launching Oracle products built on OpenAI models.
Oracle has launched AI Security Mesh, which uses OpenAI cyber models to find and test fixes for vulnerabilities, with customers approving each remediation.
The Bank of England and FCA AI survey finds 80% of UK financial firms have AI agents deployed, but only 2% report agents with broad autonomy.
F-Secure and QuTwo will compress F-Secure's scam-detection models so they run on consumer devices, keeping user data on the phone and working offline.
IBM is extending HashiCorp Vault to AI agents with short-lived credentials and governed identity, and using watsonx Orchestrate to discover and contain them.
Microsoft says its AI agents are migrating codebases including Windows and Azure, and that verifying agent-made changes is now harder than generating them.
Google Cloud has introduced IAM Helper, agent skills and MCP tools that let coding agents and pipelines handle least-privilege access workflows automatically.
Google says agents have multiplied vulnerability reports and cut time to exploit, so it now uses agentic systems to find, track and fix software flaws.
INTERPOL has launched a public campaign, with AI-generated videos, warning that deepfake scams now target private citizens and listing red flags to watch for.
OpenAI has moved frontier training offline after a research model reached the internet through a DNS flaw, and red-teamed the setup with its own models.
The HKMA's ART framework adds AI supervisory guidance, a training data platform and plans for a discussion paper on governing agentic AI in banks.
AvePoint has extended agent inventory and governance to Amazon and Claude agents and made Copilot Studio Agent Backup generally available in October updates.
Browserbase has made Parallel Web Systems' Fast and Advanced search the default for its Search API and agents, with Advanced at $5 per 1,000 requests.
HCLTech has signed a Global Premier Partnership with Anthropic, setting up a dedicated Anthropic unit and embedding Claude in HCLSoftware products.
ENISA has published a technical advisory on software bills of materials, with a lifecycle architecture, a threat model and security measures aimed at SMEs.
Teradata has added anonymisation, format-preserving encryption, post-quantum protection and immutable backups to protect the sensitive data behind AI.
IANS and Artico Search find 65% of $10bn+ firms have a head of AI security, but only 21% have a board committee on AI ethics fully in place.
Palo Alto Networks says CVE-2026-0322, an authenticated root code execution flaw in the PAN-OS management interface, has seen very limited exploitation.
The UK AI minister says the Cyber Security and Resilience Bill could be strengthened to cover reporting of serious AI incidents and loss-of-control risks.
IBM has added CUBE-powered regulatory horizon scanning to watsonx.governance so teams can map new AI rules to affected systems and track their response.
The European Commission’s code of practice on marking and labelling AI-generated content takes effect as AI Act Article 50 transparency rules apply.
Article 50 of the EU AI Act now applies, so people must be told when they are interacting with an AI system unless that is already obvious from context.
A new OpenAI safety layer aims to catch multi-step misuse patterns without breaking its zero-data-retention promise to API customers.
The road to hell is paved with good intentions, and most of them arrive as newsletters. On unsubscribe culture, marketing bullshit, and why your voice is more welcome here than your inbox space.
Google security team members Priya Pandey, Aron Eidelman, and Leonid Yankulin explain why probabilistic AI is breaking traditional DevSecOps, and how runtime security and safer observability must evolve to keep sensitive data out of your logs.
The Pentagon’s blacklisting of Anthropic over AI weapons and surveillance restrictions exposes a new class of governance risks for enterprise AI — and reveals how differently America’s leading AI companies view their obligations to the state.
IonQ has agreed to buy Zero Trust security company Elisity in an all-stock deal valued at up to $1.3bn, pairing it with IonQ's post-quantum cryptography.
MPs on the business and trade committee have questioned AI labs, former researchers and the AI Security Institute on who can stop a frontier model release.
Regulators are asking banks to show how autonomous systems are bounded, observed and stopped, shifting the debate from AI principles to evidence that supervisors can test.
The Bank of England's FPC says fast-growing AI debt issuance widens market exposure to AI and frontier AI incidents sharpen cyber and operational risks.