Reports
AI-generated structured vendor updates
Huawei Cloud Launches AICS: Control Plane Shift in the Token Industrialization Era
Huawei Cloud unveils four Agentic Infra products, led by the AICS cluster (100K cards/200 EFLOPS). It integrates NPU-direct CMS memory, CCE VolcanoNext unified scheduling, and AgentSphere security sandbox to create a unified control plane for LLM training and Agent inference, aiming to lock in the full-stack AI infrastructure.
Cisco Cloud Control & AI Canvas: The Control Point Shifts from Hardware to the AI Decision Plane
At Cisco Live 2026, Cisco launched Cloud Control, an AI-ops platform with agentic workflows, and AI Canvas for human-agent collaboration. The platform leverages Splunk's data fabric and proprietary models trained on 40 years of Cisco data. The Silicon One architecture now unifies campus and cloud switches. This marks a strategic pivot from hardware vendor to AI platform, shifting the control point to the AI decision plane.
Cisco Live 2026: AI Defense Upgrades with Policy Studio, Adaptive Red Teaming, Agent Supply Chain Security
At Cisco Live 2026, Cisco unveiled AI Defense upgrades: adaptive red teaming, Policy Studio for natural language policy, and agent supply chain security with CI/CD integration. It also launched AgenticOps autonomous network operations and native integrations with Amazon Bedrock, Google ADK, LangChain, aiming to secure multi-framework agent environments.
Intel and SambaNova Launch Rack-Scale AI, CPU Reclaims Inference Control
At Computex 2026, Intel unveiled a rack-scale AI infrastructure combining Xeon 6+ processors with SambaNova SN-50 RDU, and a decoupled inference cloud (Vector Core Compute) using Xeon 6+ for orchestration, Blackwell GPU for prefill, and SN40 RDU for decode. This CPU-centric approach targets agentic AI inference, challenging NVIDIA's GPU dominance.
NVIDIA RTX Spark: SoC Seizes PC Control, AI Compute Revolution with Ecosystem Lock-in
NVIDIA launches RTX Spark SoC, integrating Blackwell GPU with 20-core Grace CPU (MediaTek co-designed), NVLink-C2C at 600GB/s, up to 128GB unified memory, 1 petaflop FP4 AI, and local 120B-parameter LLM support. This marks a shift from GPU vendor to platform provider, directly challenging Apple M, Qualcomm, and x86 incumbents.
Anthropic Releases Zero Trust Framework for AI Agents
Anthropic releases the industry's first Zero Trust framework for AI agents, defining core principles, five agent-specific threats, and a six-capability roadmap. It shifts security focus from network perimeters to agent identity, behavior, and least agency, setting a new baseline for AI agent security.
Huawei's Tao Law: LogicFolding Bypasses Lithography, 55% Density Gain on Fixed Node
At ISCAS 2026, Huawei's He Tingbo unveiled the Tao Law, replacing geometric scaling with temporal optimization targeting tau (characteristic time). LogicFolding vertically stacks active layers to shorten critical paths, achieving 55% transistor density increase and 41% energy efficiency gain on a fixed node. Kirin 2026 reaches 3.1GHz; Ascend series will adopt LogicFolding. The roadmap projects equivalent 1.4nm density by 2031, fundamentally challenging Moore's Law's lithography dependency.
Apple Registers genai.apple.com, Siri Standalone App and Extensions System Open Third-Party AI Gateway
Apple registers genai.apple.com before WWDC 2026, signaling generative AI as a platform pillar. Siri becomes a standalone app with personal context, on-screen understanding, and deep app actions. Powered by Google Gemini on Private Cloud Compute. Extensions system lets third-party AI (Claude, Gemini) plug in, with Apple taking a cut.
Zscaler Acquires Symmetry: AI Agent Identity Becomes New Security Control Plane
Zscaler acquires Symmetry Systems to integrate Access Graph into Zero Trust Exchange, targeting AI Agent identity blind spots. Provides NHI visibility, least privilege, data lineage tracking, real-time anomaly detection, and blast radius analysis. Signals security control plane shift from network perimeter to Agent identity.
PANW Acquires IBM QRadar SaaS: SIEM Ecosystem Consolidates, Cortex Platform Locks In Enterprises
Palo Alto Networks acquires IBM's QRadar SaaS security operations assets, aiming to migrate customers to Cortex XSIAM. IBM Consulting will assist deployments, and PANW becomes IBM's internal security standard. The SIEM market now sees Splunk under Cisco, QRadar under PANW, squeezing independent vendors.
Palo Alto Networks Acquires IBM QRadar SaaS: Forcing SIEM Ecosystem Shift to AI-Native XSIAM
Palo Alto Networks acquires IBM QRadar SaaS assets to migrate legacy SIEM customers to its Cortex XSIAM AI-native security platform. IBM exits security products, pivoting to consulting and managed services. The move accelerates SIEM market consolidation, squeezing standalone SIEM vendors like SentinelOne and challenging CrowdStrike's differentiation.
Anthropic Claude Mythos Finds 10k Vulnerabilities: AI Security Audit Goes Production, Patch SLA Collapses to 7 Days
50 partners using Claude Mythos Preview discovered 10,000+ vulnerabilities, including 6,202 high/critical and 1,726 verified, with a CVSS 9.1 WolfSSL critical flaw (CVE-2026-5194). AI-assisted vulnerability discovery enters production, threatening traditional manual audits and legacy scanners like Nessus/Qualys, compressing enterprise patch SLAs to 7 days.
Microsoft Fara1.5 Browser Agent Open-Weight, 72% Success Rate Beats Closed-Source Rivals
Microsoft releases Fara1.5 (4B/9B/27B) browser Computer-Use Agent fine-tuned on Qwen3.5, achieving 72% success rate on Online-Mind2Web, surpassing OpenAI Operator (58.3%) and Gemini 2.5 CU (57.3%). Open-weight with MagenticLite sandbox, but suffers from visual prompt injection and credential exposure risks.
Fortinet Hardens AI Security into ASIC with 3500G/400G, Shifting Control to Silicon
Fortinet expands FortiGate G-series with 3500G (400GbE datacenter) and 400G (enterprise edge), natively integrating shadow AI detection and MCP traffic inspection into NP7/SP5 ASICs, shifting AI security from software to silicon for zero-performance-loss security enforcement.
Microsoft Open-Sources RAMPART & Clarity: CI-Driven Red Teaming and Multi-AI Design Validation for Agents
Microsoft open-sources RAMPART, an agent red-teaming framework that encodes attack scenarios into repeatable CI tests, and Clarity, a structured design validation tool using multi-AI perspectives. Together they form a spec-driven AI security engineering loop, aiming to lower enterprise costs and drive standardization.
BadHost CVE-2026-48710: Starlette Auth Bypass Exposes AI Agent Infrastructure to HTTP Smuggling
BadHost (CVE-2026-48710) exploits Starlette's inconsistent URL reconstruction via Host header injection, bypassing path-based auth. Affecting 400K+ repos including FastAPI, vLLM, and MCP Server, it exposes AI Agent infrastructure to data theft and potential RCE, forcing a security paradigm shift in HTTP parsing.
Zscaler's AI-Guardian Shifts Zero Trust Control Plane to Non-Human AI Identities
Zscaler launches Project AI-Guardian with six GSIs to extend Zero Trust to AI agents, introducing AI Protect suite. The core shift treats non-human identities as first-class security principals, enabling granular access control and continuous red-teaming for AI agent ecosystems.
Cloudflare Tests Anthropic Claude Mythos: 90x Boost in AI-Driven Vulnerability Discovery Reshapes Security
Cloudflare revealed using Anthropic Claude Mythos Preview (Project Glasswing) to test its codebase, discovering high-severity vulnerabilities including API key theft and unauthorized access. The model produced 90x more exploitable vulnerability reports than traditional methods, with reproduction steps and evidence, significantly reducing validation difficulty. This pushes AI security from defense to proactive vulnerability discovery.
NVIDIA CUDA Heap Overflow Exposes GPU Cloud Isolation Flaw: Driver-Level Security Must Move to Hardware
At Pwn2Own Berlin 2026, a heap overflow in NVIDIA CUDA Toolkit's NVVM compiler (CVE-2026-12839) enabled GPU cloud cross-tenant escape. The attack chain from malicious PTX to driver compromise to host kernel breaks current driver-level isolation, forcing a fundamental security architecture re-evaluation for shared GPU AI infrastructure.
Cisco AI Orders Surge to $9B, but SD-WAN Zero-Day for Third Year Reveals Systemic Security Gap
Cisco Q3 FY2026 raises AI infra order target to $9B, yet a CVSS 10.0 authentication bypass zero-day in SD-WAN Controller (CVE-2026-20182) is exploited by the same APT for the third consecutive year. This reveals a systemic gap in Cisco's security engineering as it pivots to AI, and a fundamental flaw in SD-WAN control plane architecture.