Analytics Insight, Wednesday, September 16th, 2026
Agentic AI Security: Risks, Threats, Best Practices
Autonomous AI agents create new security risks requiring identity controls, tool restrictions, and runtime monitoring. more →
This WeekHome →Calendar →Back Issues/Search →Archive →RSS →Subscribe →
Friday’s Briefing · September 25
Architecture & Governance Magazine, Wednesday, September 16th, 2026
Enterprise Architecture for Responsible AI: Governance, Risk and Operating Models
Enterprise architecture provides structure for managing AI governance across strategy, data, technology, risk, and operations. more →
TechTarget, Wednesday, September 16th, 2026
Guide to AI Data Pipeline Security and Resilience
Organizations must secure AI data pipelines through strategies addressing data poisoning and unauthorized access. more →
Agentic Runtime Security on AWS: Identity, Least Privilege, and Audit for AI Agents with IBM Verify Identity Access and HashiCorp Vault
This hands-on workshop deploys a working reference implementation of five control objectives for agentic systems - verifiable agent identity, no standing privileges, actions tied to user intent, enforcement at the point of use, and audit evidence correlated across all three trust planes (user, workload, data) - using IBM Verify Identity Access and HashiCorp Vault on Amazon EKS. more →
InfoWorld, Friday, September 18th, 2026
The Cloud Outage That Should Terrify the CIO
ChatGPT, Claude, Grok and Copilot all degraded together on one Azure region failure, exposing concentrated dependency risk. more →
CIO, Thursday, September 17th, 2026
AI Failures Are Inevitable. So Is the CIO Getting Blamed.
52% of IT leaders say CIOs take the blame for agent mistakes; just 6% point to legal or compliance. more →
CIO, Thursday, September 17th, 2026
The 7 New Cs of IT Leadership for the AI Era
A revised leadership framework built from CIO conversations: Coherence, Currency, Confidence, Conviction and Compression. more →
CIO Dive, Friday, September 18th, 2026
Skills Gaps, Not Compute, Block Enterprises From Reaping Full AI Gains
Organizations that have not chosen a platform cannot train on one, and training laggards see half the ROI rate. more →
CIO Dive, Friday, September 18th, 2026
IT Orgs Grapple With Observability Tool Sprawl
62% call consolidation very important, yet not one surveyed organization achieved a single pane of glass. more →
CIO Dive, Thursday, September 17th, 2026
AI Failures Often Trace Back to Poor Data Foundation: Survey
87% of decision-makers say teams regularly check agent context is still accurate, and half spend hours correcting outputs. more →
You've Been Heard, Tuesday, September 15th, 2026
Healthcare AI Needs A Reality Check W/Mikkel Finsen #450
IT leader Mikkel Finsen discusses rebuilding core technology systems at Open Door Family Medical Center, emphasizing that healthcare organizations must prioritize simplified infrastructure, business resilience, and strict governance over market hype when implementing AI. more →
Same Curve, Twice the Speed: Why AI Cost Management Isn't Cloud FinOps 2.0
In this session, we'll break down what actually separates AI cost management from cloud cost management: different unit economics, different owners, different attribution models, and a waste rate of 25% of cloud and AI spend, which took cloud a decade to reach and AI hit almost overnight. more →
DCIG, Thursday, September 17th, 2026
3 Ways DevOps Backup Protects Organizations From 'Good' Bad Actors
AI agents with legitimate credentials pose data risks requiring independent, immutable backups. more →
DevOps.com, Friday, September 18th, 2026
IT Outsourcing Versus In-House Development
Strategic outsourcing decisions should prioritize capability and velocity over cost, with hybrid models offering optimal balance. more →
DevOps.com, Friday, September 18th, 2026
Why Your CI/CD Pipeline Is Your Most Unprotected Attack Surface
CI/CD pipelines represent critical security vulnerabilities due to privileged access and automated code execution. more →
DevOps.com, Tuesday, September 15th, 2026
Stop Chasing 100% Test Coverage: Why DevOps Teams Need to Test Smarter, Not More
Risk-based testing prioritizes critical failures over exhaustive coverage for better release quality. more →
DevOps.com, Wednesday, September 16th, 2026
The Most Dangerous Reliability Failures Aren't Component Failures
System outages can occur when healthy components interact unsafely, not just from individual failures. more →
DevOps.com, Wednesday, September 16th, 2026
The Three Tiers of Agentic Incident Response: When to Trust AI Autonomy
Framework for balancing AI automation with human oversight in incident response through three trust levels. more →
Open Source For You, Tuesday, September 15th, 2026
Is Your Organisation's Data Secure?
Open source encryption tools protect organizational data at rest and in transit securely and affordably. more →
Analytics Insight, Tuesday, September 15th, 2026
SIEM vs SOAR: What's the Difference in Cybersecurity?
SIEM detects threats through data analysis; SOAR automates response actions through coordinated workflows. more →
Help Net Security, Wednesday, September 16th, 2026
One Runaway AI Agent Racked Up a $50,000 Cloud Bill
Mandiant report warns of autonomous AI security risks including runaway agents and supply chain attacks. more →
Analytics Insight, Thursday, September 17th, 2026
Why AI Is Forcing Companies to Rethink the Way They Defend Their Networks
AI is reshaping cyber defenses as attackers automate while organizations redesign security strategies. more →
Analytics Insight, Friday, September 18th, 2026
Cybersecurity Incident Response Plan: How to Build an Effective Strategy
Organizations need incident response plans with defined roles, rapid detection, and tested recovery procedures. more →
Continuous Modernization: Why Modernization Never Really Finishes
In this webinar, Join the discussion with AWS and trace the arc and look at what changes when modernization stops being a project with a finish line and becomes something that runs continuously across your estate. Technical debt, security gaps, and agent-readiness get measured on an ongoing basis. Validated change land as pull requests, not recommendations. more →
The New Stack, Friday, September 18th, 2026
Code Review Is Burning Out Your Best Engineers
AI-generated pull requests are overwhelming the senior engineers who built the review culture teams depend on. more →
The New Stack, Thursday, September 17th, 2026
The Critical Vulnerability Was a Test Database. That's the Whole Triage Problem.
Scanners flag severity but cannot infer business impact, so triage without context wastes scarce engineering hours. more →
The New Stack, Thursday, September 17th, 2026
Study: Developers Are Addicted to AI, and Managers Are Making It Worse
A survey finds 80% of developers describe AI as a dependence rather than an advantage, and managers reward heavy use. more →
The Register, Tuesday, September 15th, 2026
COBOL Dev Won .NET Hackathon With Help From AI - and Their CIO Loves It
Australia's tax office deploys Copilot broadly not for ROI but for 'return on employee,' and a COBOL dev proved the point. more →
InfoWorld, Wednesday, September 16th, 2026
How to Keep AI-Generated Code Aligned With Your Standards
With 41% of global code now AI-generated, standards must be explicit, available and difficult to bypass. more →
InfoWorld, Wednesday, September 16th, 2026
Software Developers Are All Managers Now
Directing coding agents requires the same skills as managing people: clear assignments, context, checkpoints and evaluation. more →
CIO, Tuesday, September 15th, 2026
The ERP Reckoning: Decades of Customization Could Block AI Value
Clean-core ERP is being reframed as the price of admission to AI, but only about half of organizations are moving. more →
The State of Data and AI Governance
The State of Data and AI Governance webinar will examine the organizational, cultural, and technical foundations required to govern data while enabling AI effectively. This includes the frameworks, roles, processes, and technologies needed to ensure trust, compliance, and responsible use at scale. more →
SiliconANGLE, Sunday, September 13th, 2026
Q-Day Is Approaching. Most Organizations Aren't Ready
Quantum computing threatens current encryption within 3 years; most organizations lack readiness plans. more →
HPCwire, Monday, September 14th, 2026
NVIDIA Expands Open Source CUDA-Q Platform for Fault-Tolerant Quantum Computing
NVIDIA adds CUDA-Q Logical, an orchestration layer for designing fault-tolerant quantum applications. more →
CIO, Tuesday, September 15th, 2026
Quantum Computing Takes Aim at AI
Quantum vendors explore using quantum technology to accelerate AI workloads alongside GPUs and CPUs. more →
Open Source For You, Wednesday, September 16th, 2026
Open-Source Platform Simplifies Quantum Computing
NVIDIA expands CUDA-Q with a new orchestration layer for fault-tolerant quantum computing systems. more →
Open Source For You, Wednesday, September 16th, 2026
Quantum Computing: The Strange World of Phase
Third article in a quantum computing series explores quantum phase and its role in quantum operations. more →
Securing the Autonomous Enterprise: Discover, Govern, and Protect Non-Human Identities
This technical briefing breaks down how to operationalize a unified security architecture to establish clarity and control over your autonomous ecosystem. more →
Help Net Security, Friday, September 18th, 2026
Abandoned IoT Apps Keep Sending Sensitive Data to Broken Servers
Nearly three in four of 61,500 abandoned Android IoT companion apps carry dependencies with documented vulnerabilities. more →
IoT Now, Wednesday, September 16th, 2026
IoT in Transition: Device Security Has Officially Become a Governance Problem
EU Cyber Resilience Act reporting obligations take effect, making device security a governance challenge. more →
Ask The Headhunter, Monday, September 14th, 2026
Do I Need a Philosophy of Job Hunting?
Job hunting success requires a personal philosophy focused on demonstrating capability rather than gaming systems. more →
Seldo.com, Monday, September 14th, 2026
We Are All Product Engineers Now
As AI automates code writing, software development transforms into product engineering focused on customer needs. more →
Forrester, Friday, September 18th, 2026
Will AI Eliminate Enterprise Architects?
AI will transform enterprise architecture roles rather than eliminate them, shifting focus to governance. more →
ZFS vs Ceph: Choosing the Right Storage Architecture
Join Klara's Allan Jude and Clyso's Dan van der Ster for a technical look at how each system works, which workloads suit which technology, and what you trade away when you scale out versus scale up. We'll cover the environments where the choice is obvious, and the ones where it isn't. more →
Anysphere, Tuesday, September 15th, 2026
How Grab Put Cursor in the Hands of Design, Ops, and Engineering
Grab rolled out Cursor beyond engineering to design and operations teams, broadening who builds software internally. more →
North American Network Operators' Group (NANOG) 98 Miami
NANOG is, and always has been, dedicated to the people who make up our community. Meet with hundreds of individuals from network engineering, operations, and architecture, who gather in major cities across North America. more →
Broadcom, Friday, September 18th, 2026
NVMe Drive Selection for Memory Tiering Explained
Broadcom explains how to choose NVMe drives for VMware Cloud Foundation memory tiering deployments. more →
Broadcom, Friday, September 18th, 2026
Strengthening the Programmable Infrastructure: Security and Hardening in VCF 9.1.1
Broadcom details the security and hardening improvements shipped in VMware Cloud Foundation 9.1.1. more →
CRN, Monday, September 14th, 2026
VMware vSphere 8 End of Support Shift to VCF 9.1 Our No. 1 Mission, Execs Say
CRN reports Broadcom's VMware is pressing partners to migrate vSphere 8 customers to VCF 9.1 before support ends. more →
Building an Effective Red Team: Beyond Penetration Testing
Attendees will explore red team methodologies, operational security, and organizational integration that maximize red team programs' value and effectively test detection and response capabilities while providing actionable improvement recommendations. more →
The Hacker News, Thursday, September 17th, 2026
Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root
The Hacker News reports a critical Check Point management flaw, CVE-2026-91843, lets unauthenticated attackers run code as root. more →
Bleeping Computer, Friday, September 18th, 2026
New Check Point Flaw Lets Hackers Execute Code with Root Privileges
BleepingComputer reports Check Point patched CVE-2026-91843, a critical pre-auth bug giving root code execution on management servers. more →
Cloudflare, Tuesday, September 15th, 2026
Have It Both Ways: Stay Discoverable in Search While Disallowing AI Training
Cloudflare lets sites stay indexed for search while blocking the same crawlers from using content for AI training. more →
Cloudflare, Wednesday, September 16th, 2026
When Scanners Miss the Attack: How Cloudflare Client-Side Security Protects Storefronts
Cloudflare Client-Side Security uncovered four malicious campaigns that conventional scanners failed to detect on e-commerce sites. more →
Cloudflare, Friday, September 18th, 2026
Saving Another 100TB of RAM with Math (and Rust)
Cloudflare engineers cut another 100TB of fleet memory usage through algorithmic changes implemented in Rust. more →
Cloudflare, Tuesday, September 15th, 2026
Give Every Teammate and Agent the Right Level of Access to Your Workers
Cloudflare adds granular authorization for Workers so teams and AI agents get scoped, least-privilege access. more →
InfoQ, Sunday, September 13th, 2026
Cloudflare Tests Cache Transcoding to Reduce Storage Requirements
Cloudflare's Cache Transcoding prototype uses Zstandard compression to reduce cache storage needs by 2.8x. more →
You Can't Scale Software Testing with Fragile Automation
In this exclusive webinar, Guy Currier, Analyst at Futurum Group, and Josh Duke, Test Cloud Specialist, at UiPath discuss how teams currently approach software testing and test automation, where they are experiencing the greatest friction, and how they are evaluating AI-powered and agentic approaches. more →
Commvault, Wednesday, September 16th, 2026
Medusa Is Evolving: Cyber Resilience, Cyber Recovery, and ResOps Matter More than Ever
Commvault tracks the evolving Medusa ransomware operation and what its tactics mean for recovery readiness. more →
Commvault, Thursday, September 17th, 2026
Prove It Before You Need It: The Playbook I Wish I'd Had 10 Years Ago
A practitioner playbook on validating recovery capability before an incident rather than discovering gaps during one. more →
Commvault, Friday, September 18th, 2026
What Is ResOps and Why Cyber Resilience Needs It
Commvault defines ResOps as a discipline for operationalizing cyber resilience across security and recovery teams. more →
Commvault, Tuesday, September 15th, 2026
When the Test Broke Containment
A recovery test that escaped its isolation boundary illustrates why clean-room design matters for resilience testing. more →
Dell, Thursday, September 17th, 2026
Bring AI to Data, Not Data to AI
Dell advocates running AI workloads where enterprise data already lives rather than moving data to AI. more →
Dell, Friday, September 18th, 2026
Enterprise AI Storage Starts with Metadata
Dell argues that metadata management is the foundation of effective enterprise AI storage. more →
Dell, Wednesday, September 16th, 2026
Faster GPUs and Smaller Caches Raise the Bar for Storage
Dell explains why faster GPUs and shrinking cache ratios put new pressure on storage systems. more →
Dell, Wednesday, September 16th, 2026
Giving AI a Memory, a Job and Eventually a Body
Dell traces the progression of AI from stateless models to persistent agents and embodied systems. more →
Dell, Tuesday, September 15th, 2026
The Last Mile of AI: Modern Devices at Scale
Dell looks at endpoint device modernization as the delivery layer for enterprise AI. more →
ServeTheHome, Monday, September 14th, 2026
Dell Pro 5 16 (AMD) Laptop Review
ServeTheHome reviews Dell's 16-inch Pro 5 business laptop built around AMD's Ryzen AI 9 HX PRO 470. more →
Extreme Networks, Wednesday, September 16th, 2026
Extreme Agent ONE Coworker Is Now Generally Available
Extreme Networks makes its Agent ONE Coworker AI networking assistant generally available. more →
Innovation at Speed, Security at Scale: Exposure Management for the Next Era of Growth
As AI, cloud, and connected technologies rapidly expand the attack surface, security teams must focus on the risks that matter most. Join CISO leaders to explore how exposure management strengthens visibility, prioritization, and resilience, thus enabling organizations to innovate confidently while reducing their most critical cyber risks. more →
Lenovo, Friday, September 18th, 2026
Lenovo's AI-Enabled iChain Helps Improve Delivery Accuracy by 30%
Lenovo's AI-driven iChain supply chain platform improved delivery accuracy by 30 percent across its operations. more →
Lenovo, Wednesday, September 16th, 2026
Lenovo Modernizes Virtualization Infrastructure for an AI-Ready Future
Lenovo expands virtualization options to give customers more hypervisor choice, resilience, and control for AI-era workloads. more →
CRN, Wednesday, September 16th, 2026
Lenovo Exec: New Virtualization Solutions Will Aid Partners in Modernization Push, with or Without VMware
CRN reports Lenovo is pitching new virtualization infrastructure and services to partners regardless of their VMware plans. more →
StorageReview, Thursday, September 17th, 2026
Lenovo ThinkAgile VX850 V4 Takes on In-Memory Virtualization with New Deploy Tiers and Four-Hypervisor Express Bundles
StorageReview details Lenovo's four-socket ThinkAgile VX850 V4 for in-memory virtualization plus new deployment service tiers. more →
Okta, Wednesday, September 16th, 2026
Enterprise Security for AI Agents: 5 Identity Rules
Okta sets out five identity rules for securing autonomous AI agents in enterprise environments. more →
Okta, Monday, September 14th, 2026
Shadow AI Endpoint Security: Discover and Govern Local Agents
Okta outlines how to discover unmonitored local AI agents and MCP servers running on employee endpoints. more →
Okta, Friday, September 18th, 2026
AI Agent Security and IAM: Lessons from AWS Scaling
Okta argues identity is the core design primitive for scaling enterprise AI agents, drawing on AWS deployment patterns. more →
Okta, Wednesday, September 16th, 2026
Beyond SSO and MFA: Why You Need Continuous Identity
Okta argues that SSO and MFA leave session-level gaps that only continuous identity evaluation can close. more →
Okta, Thursday, September 17th, 2026
Okta Unified Requester Experience: Access Requests Guide
Okta's Unified Requester Experience consolidates access requests across the Okta dashboard, Slack, and Teams. more →
Okta, Tuesday, September 15th, 2026
Detecting Shadow AI Agents with Advanced Posture Checks
Okta released 24 osquery detections in Okta Verify to surface unauthorized AI tools running on managed devices. more →
OneTrust, Tuesday, September 15th, 2026
You Are the Frontier
OneTrust argues AI governance is everyone's problem even though the pacing debate involves only a handful of labs. more →
How to Scale AI Agents Without Losing Control
This webinar explores practical approaches for governing AI agents at scale. Learn how to embed governance into workflows, define accountability, and establish the oversight needed to maintain control as AI capabilities evolve. more →
SAP, Wednesday, September 16th, 2026
From Disconnected to Autonomous: Daikin's People-Centric ERP Transformation
Daikin replaces disconnected systems with an SAP ERP platform designed around its people and processes. more →
SAP, Wednesday, September 16th, 2026
New SAP Ariba Spend Analysis and Insights Solution Now Available
SAP releases a new Ariba spend analysis and insights solution for procurement visibility. more →
CIO, Thursday, September 17th, 2026
SAP CEO: The End Is Near for the Keyboard
CIO reports SAP CEO Christian Klein expects voice and AI to replace most manual data entry within two to three years. more →
What Every Enterprise Should Know About Securing Cloud Assets In the Age of AI
In this free, full-day virtual event entitled What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI, you'll learn about the emerging threats and vulnerabilities in the cloud today, and how to ensure you have a comprehensive view and insight into your cloud infrastructure. more →
Scale AI, Tuesday, September 15th, 2026
In an Agentic World Where Automation Gets Cheap, Which Work Is Worth Routing to a Human?
Scale AI examines how to decide which tasks still warrant human review as agent automation costs fall. more →
Scale AI, Wednesday, September 16th, 2026
Why You Need to Red Team Your Enterprise AI
Scale AI argues enterprise AI systems require structured adversarial testing before and after deployment. more →
Sophos, Tuesday, September 15th, 2026
Messageboards Are All They Need
Sophos research examines how threat actors coordinate via messageboards rather than sophisticated infrastructure. more →
Sophos, Thursday, September 17th, 2026
The Answer to AI Uncertainty Is Adaptability, Not Paralysis
Sophos argues security teams should build adaptable programs rather than wait out AI uncertainty. more →
Sophos, Wednesday, September 16th, 2026
September Patch Tuesday Haul Includes 973 CVEs
Sophos breaks down an unusually large September Patch Tuesday covering 973 CVEs. more →
Sophos, Tuesday, September 15th, 2026
The Industry Turned XDR and SIEM into Categories. Sophos Turned Them into Outcomes.
Sophos positions its next-generation SIEM around security outcomes rather than product category labels. more →
Sophos, Monday, September 14th, 2026
Devil's Advocate? Uncensored Luciferus AI Service Advertised Underground
Sophos investigates Luciferus, an uncensored AI service marketed to criminals on underground forums. more →
AI Threat Readiness: Deep Dive Workshop
Your AI Systems Are Already Under Attack. Is Your Team Ready to Respond? more →
HackRead, Monday, September 14th, 2026
Trellix Details DarkSword, JSCeal, Axios npm Attack and APT28 Campaigns
Hackread breaks down Trellix's SecondSight report on DarkSword iOS exploits, JSCeal, an npm supply chain attack and APT28. more →
CodeMender: AI Code Security Agent
Discover how CodeMender autonomously scans, verifies, and fixes software vulnerabilities at machine speed-enabling rapid remediation with complete developer control. more →
