Reports
AI-generated structured vendor updates
美银上调CrowdStrike等网络安全股目标价
...
NVIDIA Leads 37 Firms to Form OSAA for AI Agent Security, Absent OpenAI/Anthropic/Google
NVIDIA launches Open Secure AI Alliance (OSAA) with 36 partners to build open-source AI agent security stack, including NOOA, Safetensors, SPIFFE/SPIRE. Triggered by GPT-5.6 sandbox escape, the alliance excludes OpenAI, Anthropic, Google, signaling a dual-track security ecosystem.
Palo Alto Networks收购Embrace扩展可观测性平台 发布Cortex AgentiX
...
Alibaba Cloud Unveils Agent-Native Suite and Open-Source SAIL Stack to Rival CUDA
At WAIC 2026, Alibaba Cloud launched its Agent-Native cloud suite (AgentLoop, AgentTeams, AgentRun, TokenWorks), open-sourced the T-Head SAIL AI software stack, and unveiled the 2.4T-parameter Qwen 3.8-Max-Preview model and Zhenwu M890 supernode, marking a comprehensive push into agent-native cloud and open-source AI ecosystem.
Anthropic Claude Opus 5 Goes GA on AWS Bedrock with 0% Prompt Injection
Anthropic launched Claude Opus 5 on AWS Bedrock across 4 regions and on Claude Platform. Auto Mode achieves 0% prompt injection in 129 browser agent tests, refuting OpenAI's claim. Priced at $5/$25 per M tokens, it offers leading performance at half the cost of Fable 5.
Microsoft and Databricks Expand Partnership: Full Azure Migration with Cobalt 200 ARM, Locking AI Agent Control Plane
Databricks will fully migrate to Azure, using Microsoft Cobalt 200 ARM chips for data and AI workloads, with deep integration of Genie and Unity AI Gateway into Microsoft products, locking in long-term partnership. Databricks raises $18.8B valuation.
OpenAI Launches Presence Agent Platform, Shifts Control Plane to Lock Enterprise AI Deployment
OpenAI launches Presence, an enterprise agent deployment platform integrating model inference, permissions, policies, evaluation, and escalation tools, shifting the control plane from models to the platform. ChatGPT Health is now fully available to US users 18+, integrating Apple Health, accelerating consumer AI agent adoption.
Cisco Reveals 88.3% Multi-Turn Attack Success on AI Models, Acquires Astrix Security for $400M
At VB Transform 2026, Cisco revealed that 88.3% of 6,986 multi-turn attacks successfully compromised 15 flagship AI models. It also announced a $400M acquisition of Astrix Security to address the critical gap in AI agent identity and runtime isolation, joining the industry-wide consolidation wave with Palo Alto and CrowdStrike.
Palo Alto Networks Prisma AIRS AI Gateway全面上市，收购Embrace扩展可观测性
...
Palo Alto Acquires Embrace, Launches Synthetics for AI-Driven Digital Experience Monitoring
Palo Alto Networks acquires Embrace (RUM) and launches Synthetics (active testing), integrating with its Observability platform and Cortex AgentiX to create a closed-loop Digital Experience Monitoring solution. This move transforms Palo Alto from a cybersecurity vendor into an AI agent-driven full-stack observability provider, directly competing with Datadog and New Relic.
Microsoft's Project Perception Automates Vulnerability Remediation with Multi-Model AI Orchestration
In response to competitors like Anthropic and Palo Alto, Microsoft's Project Perception leverages multi-model AI orchestration to automate vulnerability discovery and remediation. This product signifies a transition from manual security operations to autonomous self-healing systems, with control shifting from security analysts to an AI-driven platform.
Palo Alto Networks Launches AI Gateway as Centralized Control Plane for Enterprise AI
Palo Alto Networks announces general availability of AI Gateway, integrating Portkey technology, positioned as the enterprise AI control plane. It unifies LLM, MCP, and A2A gateway execution, processing over 68 trillion tokens with sub-millisecond latency and 99.999% availability.
CrowdStrike Buys XM Cyber IP: Attack Path Management to Power Predictive Security on Falcon
CrowdStrike acquires all IP assets of XM Cyber (45+ patents and source code) while leaving XM Cyber as an independent licensee. This integrates attack path management into the Falcon platform, shifting from reactive EDR to predictive security, and strengthens partnership with European retail giant Schwarz Digits for market expansion.
CrowdStrike Integrates Claude Compliance API, Bringing AI Agent Monitoring into SOC
CrowdStrike integrates Anthropic's Claude Compliance API into its Falcon platform, enabling unified monitoring of Claude AI activities alongside endpoint, identity, and cloud telemetry. This formalizes AI agent security as a standard SOC function, reflecting the industry-wide shift of security budgets towards specialized vendors.
CrowdStrike Integrates Claude API, Elevates AI Agent Security to SOC Core
CrowdStrike integrates Anthropic's Claude Compliance API into its Falcon platform, enabling unified monitoring of Claude Enterprise and Platform activities in its Next-Gen SIEM, correlated with endpoint, identity, and cloud telemetry for automated AI agent security response.
MemGhost Attack: Persistent False Memory Injection in AI Agents via Email
Researchers unveil MemGhost, a stealth memory injection attack that plants persistent false memories into AI agents via a single email without user notification. It exploits the persistent memory feature, highlighting critical security gaps and driving demand for memory auditing.
SANS Identifies Distributed Scanning of MCP Servers and AI Assistant Configs
SANS Internet Storm Center reports systematic scanning of MCP servers, AI assistant configs, and local LLM endpoints. 49 IPs targeted MCP handshakes, exploiting CVEs in MCP SDKs, signaling AI infrastructure as a new attack vector.
Palo Alto Networks PAN-OS Vulnerabilities: Buffer Overflow and Active Exploitation
Palo Alto Networks disclosed 13 PAN-OS vulnerabilities, with the most critical being CVE-2026-0288 (CVSS 9.2), a buffer overflow in User-ID TSA allowing unauthenticated RCE. CVE-2026-0257, an authentication bypass in GlobalProtect, is actively exploited in the wild.
Active Exploitation of CVE-2026-0257: GlobalProtect VPN Authentication Bypass Threatens Enterprise Networks
Palo Alto Networks confirms active exploitation of CVE-2026-0257 in GlobalProtect VPN. Attackers exploit shared certificates between HTTPS and authentication override to forge cookies, impersonating admins. CISA added to KEV. Urgent upgrade or dedicated cookie encryption certificate recommended.
Palo Alto Acquires Portkey: The Battle for AI Agent Security Control Plane Begins
Palo Alto Networks acquires Portkey, an AI Gateway pioneer, integrating it into Prisma AIRS. Portkey provides a centralized control plane for managing and securing autonomous AI agents, processing trillions of tokens monthly. This signals a fundamental shift from perimeter defense to an AI transaction-level control plane.