9+ min ago   (203+ words) A single researcher has now bypassed the Malware Protection Engine three times running. The third bypass works on fully patched Windows with the September 2026 updates applied. Nightmare Eclipse published a proof-of-concept on GitHub on September 9, 2026. The exploit reads arbitrary files…...

6+ hour, 8+ min ago   (51+ words) Enterprise security tools for AI agents are booming. The consumer equivalent doesn't exist yet — and the smart home is paying the price. Mila Cohen Agents at Home All stories by Mila Cohen → |[email protected] Mila Cohen works for Forkast.Minds can…...

6+ hour, 22+ min ago   (129+ words) CVE-2026-15409 chained SSRF and code injection to achieve root on SMA1000 appliances, stealing TOTP MFA seeds and turning the VPN gateway into a persistent surveillance platform. CISA flagged it for ransomware exploitation. We covered the second chain but never the first…...

18+ hour, 26+ min ago   (134+ words) The company's Agent Management product connects to nine platforms — including Salesforce Agentforce, Microsoft Copilot Studio, and AWS Bedrock — and does not require the Dataiku platform. Whether enterprises want another governance layer is the open question. Most enterprise agent governance ships…...

18+ hour, 59+ min ago   (130+ words) Multi-agent smart home systems cost 5-10x more to build than single-agent tools. The protocol powering them executes OS commands by design. And regulators haven't caught up. The era of the “free” smart home was always a myth. Sonos isn’t charging you…...

19+ hour, 17+ min ago   (272+ words) Akeyless's GA release formalizes intent-based access control as a distinct infrastructure layer — the first production-ready product to bridge the gap between governance specification and runtime enforcement for AI agents. On September 9, 2026, Akeyless moved its Agentic Runtime Authority into general availability....

19+ hour, 39+ min ago   (191+ words) Okta, IBM, Broadcom, and Dataiku each shipped standalone agent governance tools between August 24 and early September. They approach the problem from different infrastructure layers—identity, orchestration, security, observability—but the convergence signals one thing: the market is building guardrails before…...

1+ day, 2+ min ago   (69+ words) Haier is investing €13 billion to make appliances themselves the AI agents, bypassing the hub model entirely. But with 88.4% of organizations reporting agent-related security breaches, the smart home's biggest bet comes with its biggest risk. Mila Cohen Agents at Home All…...

1+ day, 6+ hour ago   (148+ words) Two PaperCut vulnerabilities are now chained into a fully automated attack pipeline with in-memory persistence—and 47% of installations can't patch. On August 26, security researchers at Huntress identified anomalous activity in customer logs involving base64-encoded commands like whoami and tasklist. This…...

1+ day, 6+ hour ago   (151+ words) You probably think of your digital calendar as a benign scheduling tool. Dentist appointments, grocery runs, work meetings—the mundane markers of a busy week. But researchers from Tel Aviv University, Technion, and security firm SafeBreach have demonstrated that your…...