8+ hour, 32+ min ago   (272+ words) Akeyless's GA release formalizes intent-based access control as a distinct infrastructure layer — the first production-ready product to bridge the gap between governance specification and runtime enforcement for AI agents. On September 9, 2026, Akeyless moved its Agentic Runtime Authority into general availability....

8+ hour, 54+ min ago   (191+ words) Okta, IBM, Broadcom, and Dataiku each shipped standalone agent governance tools between August 24 and early September. They approach the problem from different infrastructure layers—identity, orchestration, security, observability—but the convergence signals one thing: the market is building guardrails before…...

1+ day, 3+ hour ago   (61+ words) As Dreamforce positions agent security as a first-class pillar, the security keynote raises three questions Salesforce hasn't answered: agent identity, headless authentication, and audit trails for multi-agent environments. Heath Callahan Trust, Identity & Security All stories by Heath Callahan → |[email protected] Heath…...

1+ day, 18+ hour ago   (308+ words) The industry's largest enterprise platform has re-engineered governance from a bolt-on compliance layer into the core runtime of the agentic enterprise. For builders, the question is no longer whether to govern agents — it's how deeply governance shapes the architecture. When…...

1+ day, 18+ hour ago   (104+ words) The authentication gap has migrated from agent runtimes into the inference server layer. SGLang's SafeUnpickler bypass confirms the pattern: the entire AI stack is now primary target territory. IBM Langflow (CVE-2026-81204), also disclosed September 8, carries a CVSS of 9.8 and allows…...

2+ day, 9+ hour ago   (149+ words) The roadmap for the second half of 2026 suggests that this integration will only deepen. Planned updates include native MuleSoft onboarding features and expanded runtime security specifically for AI and MCP environments. These capabilities will be demonstrated at Salesforce Dreamforce from…...

2+ day, 9+ hour ago   (69+ words) CVE-2026-82533 is the first confirmed vulnerability where an AI agent runtime sandbox was the direct attack surface. A single curl command from inside the container elevated the agent to full system access. Heath Callahan Trust, Identity & Security All stories by…...

2+ day, 18+ hour ago   (68+ words) A Zurich workshop brought W3C, GS1, Google, Shopify, OpenAI, and Mars together to address the 'last meter' problem – agents can complete transactions but still buy the wrong product without proper identity standards. Tessa Vaughn Agentic Commerce All stories by Tessa Vaughn → |[email protected]…...

2+ day, 20+ hour ago   (76+ words) UC Berkeley's MAST taxonomy shows the vast majority of multi-agent system failures stem from how agents are designed and specified, not from model limits. The industry's runtime enforcement stack addresses the easier half of the problem. Blair Hayes Agent Infrastructure…...

5+ day, 20+ hour ago   (66+ words) ServiceNow, Microsoft, MintMCP, Citrix, and CrowdStrike all converged on the same infrastructure layer within a single week — each arriving at runtime enforcement from a different corner of the enterprise stack. Blair Hayes Agent Infrastructure All stories by Blair Hayes → |[email protected]…...