Reports
AI-generated structured vendor updates
英特尔与Fortinet共同开发SP6安全处理器，强化网络防火墙ASIC能力
...
Cisco Proposes Logically Air-Gapped Model with eBPF, Shifting Security to Kernel
Cisco introduces a logically air-gapped governance model using eBPF and Cilium to create a software-defined cryptographic perimeter at the kernel level. Integrating Cisco Secure Workload with Isovalent, it aims to provide data residency and regulatory compliance for containerized, virtualized, and bare-metal environments without sacrificing cloud agility.
NVIDIA CUDA 13.3 Introduces clmad for Hardware-Accelerated Carryless Multiplication on GPUs
NVIDIA CUDA 13.3 adds the clmad hardware instruction for carryless multiply-accumulate on Ampere+ GPUs. GHASH throughput reaches 6.3 TB/s on B200, up to 18.8x faster than bitsliced. Sum-check protocol accelerates 3-13x. The instruction also benefits CRC, Reed-Solomon, and post-quantum cryptography.
Google Cloud Launches Blackwell GPU Confidential VM & Open-Source Prompt Encryption SDK, Redefining AI Security
Google Cloud upgrades its confidential computing portfolio with Blackwell GPU-based confidential VMs (Confidential G4 VMs preview), open-source Prompt Encryption SDK, and enhanced Confidential Space featuring Intel Trust Authority and Hopper GPU support, addressing TEE vulnerability CVE-2026-33697 to bolster AI inference and cross-organization training security.
Arm servers capture >45% data center revenue, x86 ecosystem under AI-driven assault
IDC reports Q1 2026 global server revenue hit a record $122.6B, with Arm-based servers capturing >45% share (x86 at 52%). Accelerated servers (GPU/ASIC/FPGA) generated >70% revenue. Nvidia's Grace CPU (NVL72) and hyperscaler custom Arm chips drive the shift; x86 still leads in unit volume but faces supply constraints.
AMD MEXT Acquisition Turns NAND Flash into DRAM-Class Memory, Halving AI Inference Cost
AMD acquires MEXT, whose technology makes cheap NAND flash behave like expensive DRAM, doubling to quadrupling usable memory capacity while halving costs. This targets inference and agentic AI memory bottlenecks. AMD also signs a 30MW AI compute deployment deal with Rackspace, rolling out from 2026 to 2028.
AMD Silently Drops TSME from Consumer Ryzen: Security Segmentation Locks Enterprise Users
AMD quietly removed Transparent Secure Memory Encryption (TSME) from consumer Zen 5 Ryzen CPUs, reserving it exclusively for Ryzen PRO series. The change, effective from AGESA 1.2.7.0, is hard to detect on Windows but visible on Linux. This security feature segmentation pushes enterprise buyers toward higher-priced PRO SKUs.
AMD Mustang Peak Threadripper: 144 cores, PCIe 6.0, TR6 socket – Power and memory challenges loom
AMD's Zen 6 Threadripper 'Mustang Peak' is confirmed with 2nm TSMC process, DDR5, PCIe 6.0, and a new TR6 socket. Using Powderhorn CCDs, it scales to 144 cores (288 threads) with clocks above 6 GHz. However, massive power draw and memory bandwidth demands (possibly requiring MRDIMM) raise platform cost concerns.
NVIDIA and HPE Expand AI Factory with Vera CPU for Agentic AI, Full-Stack Integration
NVIDIA and HPE expand the HPE AI Factory with the Vera CPU, the first CPU built for agentic AI, plus the NVIDIA Agent Toolkit, Confidential Computing, and full-stack NVIDIA integration (Spectrum-X, BlueField, ConnectX). This turnkey solution targets enterprise agentic AI production, locking customers into NVIDIA's hardware-software stack.
Cisco Unveils AI-Native Branch Architecture with AgenticOps and PQC
At Cisco Live 2026, Cisco refreshes the Secure Router 8000 series and introduces a Unified Branch architecture with AgenticOps, post-quantum cryptography (PQC), and hybrid mesh firewalling. The control plane moves to Cisco Cloud Control, aiming for an AI-native, cloud-managed WAN platform.
Cloudflare Embeds Live Threat Intel into WAF, Shifting Control from Manual Rules to Automated Engine
Cloudflare announces integration of real-time threat intelligence (from Cloudforce One) into its WAF engine, enabling proactive rules based on IP, attacker names, target industries, etc. Uses always-on detection with O(1) constant-time lookup for negligible latency. Currently IP-based, with plans for JA3 and domain matching.
Cisco Silicon One Expands to Campus: Chip-Embedded Control Locks Agentic AI Networks
Cisco extends Silicon One to campus with C9550/C9350 switches and Cloud Control, embedding distributed visibility, sustained high throughput, and adaptive programmability directly into the silicon. Deep on-chip buffering, identity-aware forwarding, and sub-second policy updates shift control from perimeter devices to chip and cloud-native orchestration, targeting agentic AI workloads.
NVIDIA BlueField DPU In-Silicon Security Shifts AI Factory Control from Software to Hardware
NVIDIA unveils DOCA security stack (Argus, Vault, Flow) on BlueField-4 DPU, enabling hardware-isolated runtime threat detection via zero-copy memory analysis, zero-trust file access, and 800 Gb/s network enforcement. This shifts security control from host OS to DPU silicon, delivering distributed full-stack protection without compromising AI throughput, but deeply ties to Vera Rubin platform, creating ecosystem lock-in.
Cloudflare GA Post-Quantum IPsec: Hybrid ML-KEM Standard Defeats QKD, Proprietary Suites
Cloudflare announces GA of post-quantum encryption for its IPsec product, implementing hybrid **ML-KEM (FIPS 203)** per **draft-ietf-ipsecme-ikev2-mlkem**. It achieves interoperability with **Cisco IOS XE** and **Fortinet FortiOS 7.6.6+** without special hardware. This extends post-quantum security to site-to-site WAN and explicitly rejects the **QKD** approach.
Cisco Launches Firepower 6100 with Integrated Detection Engine to Combat Shadow Traffic
Cisco deployed its new Firepower 6100 firewall on the live MWC 2026 network, validating the Shadow Traffic detection feature in its 10.0 software release. This capability integrates Application ID, Encrypted Visibility Engine, and TLS/QUIC decryption to automatically identify and flag covert connections that bypass traditional security controls.
Cisco's Annual Report Reveals AI-Era Security Strategy: Expanding from Personal Data to Industrial Data Governance
Cisco's FY25 Purpose Report emphasizes security, privacy, and trust as business imperatives in the AI era. The core shift is the expanded mandate of its Privacy Center of Excellence (PCOE), moving beyond personal data to govern regulated 'industrial data'. The report also details AI-powered threat detection engines like SnortML and DNS Security Service.
Cisco Introduces Full-Stack Post-Quantum Cryptography Architecture
At Cisco Live 2026, Cisco unveiled the industry's first full-stack post-quantum cryptography (PQC) architecture using NIST-approved quantum-resistant algorithms, spanning from device boot integrity to data-in-transit protection. This represents the most significant cryptographic advancement in two decades, addressing the 'harvest now, decrypt later' threat posed by quantum computing.
Cisco Advances Cloud-Native Service Architecture with Isovalent
Telefónica's acens adopts Cisco's Isovalent Enterprise for Cilium to build a high-performance, observable, and secure Kubernetes platform, meeting enterprise needs in multi-cloud environments. The solution leverages eBPF technology to provide granular network policies and transparent encryption, enhancing security in multi-tenant environments.
HPE Enhances AI Security Architecture for Adoption Risks
HPE introduces SRX400 Series Firewalls, expanded hybrid mesh security, and AI governance capabilities to secure AI adoption. Features include AI app visibility, prompt-level inspection, and identity-based protection to mitigate data exposure risks.
Fortinet Integrates AI Agents and SASE in FortiOS 8.0
Fortinet introduces FortiOS 8.0 with fabric-based AI agents, secure AI controls, flexible SASE, and simplified SD-WAN to expand AI-driven security in enterprise networking, shifting control planes towards AI integration.