AI breakthroughs that matter.
Twice a week.

NIST IR 8587 (final Sep 15, 2026) delivers comprehensive token security guidance — signed identity tokens, access tokens, SSO assertions, key protection, short-lived credentials. But Section 1.1.1 admits: AI/agent access risks need separate guidance. NIST and CISA know the gap; token controls alone won't stop rogue agents.

The Stop Rogue AI Act directs NIST to develop national standards for discovering, verifying, and controlling AI agents. Core requirements: continuous machine-readable inventory, cryptographic identity and provenance, real-time monitoring, allow/deny/revoke controls, and tamper-evident action logs. Federal procurement becomes the enforcement lever.

Leaders at Anthropic, OpenAI and Google have discussed creating a FINRA-style AI safety standards body — public-private partnership, industry-funded, staffed by independent technical experts. Congress unlikely to move before midterms. What this means for enterprises deploying AI.

Google's Threat Intelligence Group documented financially motivated attackers using autonomous multi-agent frameworks to plan, build, and execute mass credential harvesting from compromised cloud infrastructure in under six hours. Over 23,800 secrets found on a single exposed C2 dashboard. From prompting to autonomy: the new threat surface is here.

Dario Amodei published 'We Must Pace the Frontier,' a 3-part plan to slow AI development through independent evaluators with employee-like access, industry standards, and international cooperation. Sam Altman, Elon Musk, and Demis Hassabis publicly backed the direction.

OpenAI told staff it's open to industry-wide slowdown coordination. But would a frontier AI pause violate the Sherman Act? Congress is now debating clearer antitrust room for safety collaboration — while labs flag recursive self-improvement happening faster than expected.

EU regulators have direct access to frontier models under AI Act systemic-risk powers. ENISA is now testing Anthropic's Mythos 5 and OpenAI's GPT-6 Astra. What this means for enterprise teams deploying AI.

OpenAI's latest o3 model scores 2727 on Codeforces and 96.7% on AIME 2024, pushing AI reasoning to PhD-level math. But the compute bill is staggering. Here's what enterprise teams need to know.