Dark Reading, Monday, September 28th, 2026
AI Agents Are Privileged Users; Who Is Auditing Their Access?
An IT audit leader argues AI agents should be governed as privileged identities, with ownership, logging, access reviews and containment. more →
This WeekHome →Calendar →Back Issues/Search →Archive →RSS →Subscribe →
Wednesday’s Briefing · October 7
Data Center Knowledge, Monday, September 28th, 2026
The Next Generation of AI Infrastructure Design Starts with Efficiency
AI data centers need a systems-level design that weighs power, cooling and compute together, measured by more than PUE alone. more →
InfoWorld, Tuesday, September 29th, 2026
Why Faster AI Coding Can Mean Harder Engineering
Matt Asay argues AI coding agents make engineering faster but more demanding, so companies shouldn't cut expertise. more →
InfoWorld, Wednesday, September 30th, 2026
Observability for AI-Native Systems: New SLIs Beyond Latency and Error Rate
Defines AI-specific SLIs such as task accuracy, hallucination rate and cost per successful task for LLM systems. more →
No Jitter, Tuesday, September 29th, 2026
AI Agents Need Identities, Not Just Permissions
Enterprises should give each AI agent a persistent identity record covering its purpose, human owner, delegated permissions and expiry. more →
RTInsights, Thursday, October 1st, 2026
Enterprises Don't Need Bigger AI Models. They Need Better AI Architecture.
Enterprise AI advantage is shifting from model selection to system design that routes work to the right model or tool. more →
ZDNET, Thursday, October 1st, 2026
Who Owns AI Risk at Work? Business and Tech Leaders Can't Agree, PwC Survey Finds
PwC's survey of 4,000 leaders finds no consensus on who is accountable for agentic AI risk and security. more →
Continuous Modernization: Why Modernization Never Really Finishes
Join the discussion with AWS and trace the arc and look at what changes when modernization stops being a project with a finish line and becomes something that runs continuously across your estate. Technical debt, security gaps, and agent-readiness get measured on an ongoing basis. Validated changes land as pull requests, not recommendations. more →
You've Been Heard: The IT Leadership Podcast, Tuesday, September 29th, 2026
458- Stop Turning the Light Off w/John Errington
IT leader John Errington explains why teams should automate recurring fixes and how AI speeds incident postmortems. more →
You've Been Heard: The IT Leadership Podcast, Wednesday, September 30th, 2026
459- Make the Approved Path Fast Enough w/Brandon Muncy
PepperPointe IT lead Brandon Muncy on winning trust one visible fix at a time and making approved AI faster than shadow AI. more →
DevOps.com, Thursday, October 1st, 2026
AWS AI Agent Surfaces Recommendations to Optimize Cloud Computing Environments
AWS previews the Well-Architected Agent, which recommends cost, security, performance and resilience fixes with code. more →
DevOps.com, Monday, September 28th, 2026
Headless DevOps Gives AI Agents Access to Delivery Workflows
Copado's Federico Larsen explains exposing DevOps platforms to AI agents via APIs, CLIs and MCP without losing controls. more →
DevOps.com, Thursday, October 1st, 2026
Introducing Futurum Media: Why Futurum, Why Now?
Futurum launches Futurum Media, combining Techstrong, Tech Field Day and Visible Impact under one umbrella. more →
DevOps.com, Monday, September 28th, 2026
Keeping Humans Accountable as AI Agents Take On the SDLC
Atlassian's Ming Wu says governed agent loops can automate SDLC work, but people must stay accountable for results. more →
DevOps.com, Wednesday, September 30th, 2026
Survey Surfaces Sharp Increase in Amount of Code Written by AI
A survey of 705 developers finds 42% say AI now writes at least half their code, shifting time to review and debugging. more →
DevOps.com, Friday, October 2nd, 2026
The DevOps Standard Gives Teams a Shared Model for Software Delivery
PeopleCert's new DevOps Institute book, The DevOps Standard, offers a vendor-neutral definition and operating model. more →
SC Media, Monday, September 28th, 2026
Why Identity, Not the Network, Has to Be the Perimeter
In Kubernetes and multi-cloud, zero trust must rest on cryptographic workload identity, not ephemeral network location. more →
SecurityWeek, Thursday, October 1st, 2026
Zero Trust Creator Says Model Holds Firm Against AI-Assisted Attacks
John Kindervag's new book argues zero trust still works against AI-driven attacks, but only if the policy engine is implemented correctly. more →
TechTarget, Tuesday, September 29th, 2026
Why Cybersecurity's Future Isn't AI vs. Humans - It's Both
Government cyber leaders at the Billington Summit say AI augments human defenders rather than replacing them. more →
TechTarget, Monday, September 28th, 2026
Shadow AI Agents: What CISOs Need to Know
Shadow AI agents are spreading as business units bypass IT, and shadow AI-driven breaches have more than doubled. more →
Network World, Monday, September 28th, 2026
Why a Network Digital Twin Is the Missing Piece for AI-Era Operations
As AI agents start making network changes, a mathematical digital twin is needed to predict the impact of a change before it reaches production. more →
Building a Secure AI Strategy for the Enterprise
This virtual event explores the implications of this new world order of AI agents joining the business, including AI discovery, governance, identity, and how to put in place the proper guardrails. more →
CDOTrends, Thursday, October 1st, 2026
When Production AI Fails Silently: An Engineering Playbook for Building Reliable AI Systems
A playbook explains how production AI degrades without visible errors and what evaluation, observability and governance practices catch it. more →
Cybersecurity Dive, Thursday, October 1st, 2026
SOC Staffers Generally Pleased With AI's Impact, but Worries Remain
A survey of 500 SOC workers finds AI boosts job satisfaction and skills, though many fear fewer entry-level roles and over-reliance. more →
Data Center Knowledge, Friday, October 2nd, 2026
Five Ways to Assess Your AI Infrastructure Readiness
A five-part framework for checking AI readiness across performance, power and cooling, security, cost strategy and scalability. more →
Data Center Knowledge, Wednesday, September 30th, 2026
Data Center On-Site Power Brings Pollution Risks Closer to Home
A $1.07M New Jersey penalty over unpermitted gas generators shows the environmental compliance risks of on-site data center power. more →
Data Center Knowledge, Thursday, October 1st, 2026
The Hidden Failure Domain in N+1 Data Center Cooling
Redundant cooling equipment can still fail together when pumps and CRAHs share a single controller, network path or sensor. more →
Data Center Knowledge, Friday, October 2nd, 2026
From Opposition to Buy-In: Tactics for Data Center Developers
Facing growing community pushback, data center developers are leaning on transparency, grid funding and local benefits. more →
TechnologyAdvice, Sunday, September 27th, 2026
5 Best HR Apps for 2026
TechnologyAdvice compares 15 mobile HR apps and picks five for time off, pay, scheduling and approvals on the go. more →
TechnologyAdvice, Tuesday, September 29th, 2026
Best HRIS Systems in 2026
After reviewing 11 HRIS providers, TechnologyAdvice names Gusto best overall, with BambooHR and GoCo also standing out. more →
CIO, Tuesday, September 29th, 2026
What Do You Do With an AI Conscientious Objector?
A tech leader explains how they handled an employee refusing to use AI, while holding them to AI-era benchmarks. more →
CIO Dive, Thursday, October 1st, 2026
Tech Skills Gaps Are Stopping Projects in Their Tracks
Pluralsight research finds skills gaps push most tech projects over budget, with many firms wasting $250,000 or more. more →
Help Net Security, Friday, October 2nd, 2026
Criminal Recruiters Want People on Your Payroll
Research on underground forums shows criminals recruiting insiders to sell account resets, lookups, SIM swaps and shipment changes. more →
HR Dive, Wednesday, September 30th, 2026
Technology Isn't Yet Solving HR's Workflow Problems
Despite AI adoption, 51% of HR pros still spend half their week on repetitive admin, an Eagle Hill survey finds. more →
Akamai Technologies, Wednesday, September 30th, 2026
When Productivity Extensions Become Attack Platforms
Akamai's LayerX researchers expose 32 malicious Chrome and Edge extensions that spy on users and commit affiliate fraud via remote configs. more →
Building an Effective Red Team: Beyond Penetration Testing
Attendees will explore red team methodologies, operational security, and organizational integration that maximize red team programs' value and effectively test detection and response capabilities while providing actionable improvement recommendations. more →
Cloudflare, Friday, October 2nd, 2026
Follow the Thread: A New Dashboard to Investigate Account Abuse
Cloudflare's new Account Abuse Protection dashboard uses stateful analysis and hashed user IDs to investigate and block AI-driven fraud. more →
Cloudflare, Thursday, October 1st, 2026
Introducing Clef: Our Open-Source Decision Models, and New RL Fine-Tuning Platform
Cloudflare releases Clef and Clef-flash, open-source decision models on Workers AI, plus an RL platform to fine-tune them on your data. more →
Cloudflare, Thursday, October 1st, 2026
Introducing Cloudflare Basin: An Open, Serverless Data Platform, Now Generally Available
Cloudflare's data platform reaches GA as Basin, a serverless Apache Iceberg analytics stack on R2 with no egress fees. more →
Cloudflare, Thursday, October 1st, 2026
Announcing Cloudflare K2: Serverless Event Streams
Cloudflare K2, now in public beta, is a serverless event streaming service built on R2 for durable, ordered log streams. more →
Cloudflare, Friday, October 2nd, 2026
Introducing Cloudflare Traces: Follow Requests Through Our Entire Platform
Cloudflare Traces, now in open beta, shows how each request moves through security rules, cache, routing, Workers and origin. more →
Cloudflare, Friday, October 2nd, 2026
Introducing Web Search API via AI Gateway
Cloudflare AI Gateway adds a native web search API so agents can ground model calls in live web results instead of guessing URLs. more →
Darktrace, Wednesday, September 30th, 2026
AI-Assisted Attacks Still Leave a Behavioral Trace
Darktrace shows how behavioral analysis caught two AI-assisted campaigns through WebDAV transfers, beaconing and C2 traffic. more →
SecureWorld Threat Defense Virtual Conference
The conference brings together cybersecurity professionals, leaders, and solution providers to discuss emerging threats, defense strategies, AI integration, and cloud security, while offering opportunities to network and earn CPE credits. more →
Databricks, Thursday, October 1st, 2026
Lakebase Postgres Branch-Based Restores for Fast Recovery at Scale
Lakebase Postgres uses branch-based restores to recover even 100 TB databases in seconds instead of hours. more →
Databricks, Wednesday, September 30th, 2026
A Practical Guide to Cost Optimization with Lakebase Postgres
Tips for controlling Lakebase Postgres costs: sync only working data, match sync mode to freshness and right-size compute. more →
Databricks, Friday, October 2nd, 2026
Real-Time Retail Intelligence: Building E-Commerce Recommendations with Lakebase and AI Search on Databricks
Reference architecture for a real-time e-commerce recommendation engine on Databricks using Zerobus, Model Serving, Lakebase and AI Search. more →
Technology Risk Excellence: What High-Performing CIOs Do Differently
This webinar will reveal what high-performing CIOs do differently to strengthen technology risk management, resilience, cybersecurity readiness and AI risk governance. more →
Dell, Monday, September 28th, 2026
A New Era of AI Agents Demands a New Security Model
Dell outlines how the NVIDIA Open Agent Safety Platform on Dell AI Factory enforces AI agent boundaries at runtime, network and silicon layers. more →
Dell, Monday, September 28th, 2026
The Best AI Data Architecture Fits the Estate You Already Have
Dell urges AI data platform buyers to look past converged vendor messaging and pick architectures that fit data where it already lives. more →
SiliconANGLE, Tuesday, September 29th, 2026
Enterprise AI Deployment Strategy Shaped by Cost and Control
At Dell's AI Leadership Symposium, experts say token costs and governance are reshaping where and how enterprises run AI. more →
StorageReview, Wednesday, September 30th, 2026
Dell PowerStoreOS 5.0 Deep Dive: The Software Half of the Elite Reset
PowerStoreOS 5.0 runs across all PowerStore generations, letting mixed fleets cluster and work as one system. more →
Dynatrace, Tuesday, September 29th, 2026
A Design Refresh for Every Dynatrace App, Including Yours
Dynatrace ships a UI refresh to every app at once via its Strato design system, adding value-based filters and reusable time ranges. more →
Dynatrace, Friday, October 2nd, 2026
From Symptom to Fix in Minutes: AI-Assisted Development with Dynatrace MCP
Dynatrace shows how its MCP Server lets AI coding agents use live observability data to trace slowdowns to specific lines of code. more →
Huntress, Monday, September 28th, 2026
Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix
Huntress found attackers using ChatGPT Custom GPTs to impersonate products and push a ClickFix lure that installs a RAT. more →
Huntress, Thursday, October 1st, 2026
The Huntress Tragic Quadrant: Beat the Hype on Cyber Tactics Wrecking Businesses
Huntress ranks attacker tactics by prevalence and proximity to business disruption, topped by RMM abuse, BEC and AiTM takeover. more →
Huntress, Friday, October 2nd, 2026
Companies Push AI Use, But Many Skip Training (43%) and Official Policies (26%)
A Huntress survey finds 43% of knowledge workers got no AI training and 74% could not spot a prompt injection risk. more →
Huntress, Monday, September 28th, 2026
What Good Privilege Hygiene Looks Like
Huntress outlines least-privilege practices to curb local admin sprawl, sticky admin sessions and accidental SaaS admins. more →
Huntress, Friday, October 2nd, 2026
The First 24 Hours: What Actually Happens When Ransomware Lands
Huntress walks through the first day of a ransomware incident hour by hour, from discovery to recovery decisions. more →
Building a Secure AI Strategy for the Enterprise
Security experts in this event will share the latest AI-borne threats, how to defend against them, and how to leverage AI technology and tools to automate and streamline security operations for faster detection and response. more →
Leidos, Tuesday, September 29th, 2026
The Changing Cyber Landscape: 5 Operator Priorities
Leidos shares five cyber takeaways from the Billington CyberSecurity Summit, from AI-speed attacks to identity threats. more →
Leidos, Tuesday, September 29th, 2026
Leidos Launches Agentic AI Platform to Speed Response to Cyber Threats
Leidos launches UpHold Effect Agentic SOC Automation, using AI agents to triage alerts around the clock, with a FedRAMP High option. more →
Microsoft, Monday, September 28th, 2026
Enhancing Microsoft Azure Virtual Machine Lifecycle
Azure introduces a VM Lifecycle policy with Current, Extended, End of Life and Retired stages to help customers plan migrations. more →
Microsoft, Wednesday, September 30th, 2026
Responsible Infrastructure at Hyperscale: Managing the Full Lifecycle of Azure Hardware
Azure details denser, more efficient datacenter hardware and new Circular Centers in Wales and Sydney for reusing retired equipment. more →
Microsoft, Monday, September 28th, 2026
New Microsoft Data Innovations Unlock What Only Your Business Knows
Microsoft announces Fabric and Azure database advances, including Fabric IQ grounding Copilot in governed Power BI semantic models. more →
Microsoft, Monday, September 28th, 2026
NeedyMantis: Unpacking a Post-Compromise Malware Family Used in Targeted Operations
Microsoft details NeedyMantis, a modular post-compromise malware framework used for long-term access in targeted intrusions. more →
Microsoft, Tuesday, September 29th, 2026
Beyond Source Code: A Path to the Keys to the Kingdom
Microsoft DART details how Storm-3068 turned a password reset into access to Azure DevOps pipelines and Kubernetes resources. more →
Microsoft, Thursday, October 1st, 2026
Insights from the 2026 Microsoft Digital Defense Report
Microsoft releases its 2026 Digital Defense Report, highlighting how threats span identities, cloud, supply chains and AI agents. more →
Rapid7, Thursday, October 1st, 2026
How AI Is Changing the Roles Required in the Security Operations Center
Rapid7 highlights Gartner research on how SOC roles, skills and KPIs must be redesigned as AI takes over triage work. more →
Rapid7, Wednesday, September 30th, 2026
Higher Education Is Under Siege, and Fragmented Security Is Making It Harder to Respond
Rapid7 on why universities are hard to secure and how fragmented tooling slows their response to rising attacks. more →
Rapid7, Friday, October 2nd, 2026
SMTP Is the Key: BPFDoor and AVERAT Hitting the Network Edge
Rapid7 analyzes a new BPFDoor variant, a BPF Rekoobe build and the AVERAT Linux implant targeting telecom and edge devices. more →
Practitioner Perspective: Achieving Fine-Grained Control for Data and AI on the Endpoint
Join us for a practitioner-focused deep dive on what it takes to move beyond blind alerting and blunt blocking. Bold sits down with Michael Roberts, Security Engineer at Cresta, a leading AI company, to explore an age-old question: How do you get the fine-grained control to stop real data loss without getting in the way of employee productivity? more →
Riverbed, Monday, September 28th, 2026
Network 360: Operationalizing Intelligent Network Observability
Riverbed explains how Network 360 extends existing network monitoring to endpoints with AI-powered intelligence and automation. more →
Agentic Security Needs to Operationalize Threat Intel
Agentic AI has changed attacks for both adversaries and defenders, but AI has not changed the fundamentals of security. Triage is not the end goal for defenders; prevention is. This means hyperfast AI-powered triage is still not a solution, just one more (very necessary) tool. more →
Salesforce, Tuesday, September 29th, 2026
Agentic AI and the Future of Work: What It Means for Salesforce Practitioners
Salesforce looks at how agentic AI is changing what practitioners build and how they work, and where roles go next. more →
Salesforce, Thursday, October 1st, 2026
What's New in B2C Commerce: The September 2026 Release
Salesforce B2C Commerce's September 2026 release adds merchandising tools, consent integrations, security updates and developer features. more →
Salesforce, Thursday, October 1st, 2026
Agents Can Mimic Good Design. Ours Know Why It Works
Salesforce uses design skills, linters and evals so coding agents produce consistent, accessible, production-ready UI. more →
Salesforce, Wednesday, September 30th, 2026
The Tableau Knowledge Engine: How We Built Trustworthy Agentic Analytics
Tableau explains its knowledge engine, a runtime layer giving analytics agents a reliable understanding of business meaning. more →
Salesforce, Friday, October 2nd, 2026
Unpacking Dreamforce: Why Your AI Needs Trusted Context
Dreamforce takeaways on how Data 360, the Agent Context Engine and Agentforce Coworker give AI agents trusted business context. more →
Salesforce, Thursday, October 1st, 2026
Getting to ROI: How Brands Turn Cost Centers into Revenue Engines with AI
AT&T, Southwest, Canada Goose and other Salesforce customers share lessons on getting ROI from agentic AI deployments. more →
Sophos, Thursday, October 1st, 2026
Sophos CISO Advantage Is Now Generally Available
Sophos CISO Advantage is now GA, giving organizations and MSPs framework-mapped control evidence, roadmaps and board reporting. more →
Sophos, Tuesday, September 29th, 2026
Jev's Paradox: The Hidden Cost of Cheap AI Decisions
Sophos examines how cheap classifier-style AI decisions could multiply total errors if accuracy and calibration fall short. more →
Sophos, Wednesday, September 30th, 2026
Sophos Firewall v23 Is Now in Early Access
Sophos Firewall v23 enters early access with 30+ requested features, including a REST API and AI-powered firewall assistant. more →
Sophos, Wednesday, September 30th, 2026
TerminalFix and Lorem Ipsum Loader Enable Covert Tunneling
Sophos details STAC4924, a campaign using TerminalFix lures and Lorem Ipsum Loader to deploy a Python tunneling implant. more →
Trellix, Wednesday, September 30th, 2026
Beyond the Blind Spots: 5 Reasons Your Modern Security Stack Is Still Failing
Trellix argues EDR, SASE and ZTNA leave gaps against living-off-the-land attacks and makes the case for active network detection and response. more →
Boston Official Cybersecurity Summit
The 12th Edition of the Boston Official Cybersecurity Summit is the must-attend event for CISOs and senior leaders looking to strengthen resilience, reduce risk, and align security with business goals. more →
Zscaler, Wednesday, September 30th, 2026
When Your Team Includes Non-Humans, Leadership Changes
Zscaler CISO Sam Curry argues agentic AI makes accountability, not authority, the central leadership problem for enterprises. more →
Zscaler, Monday, September 28th, 2026
What's New in Zscaler SSE
Zscaler outlines new ZIA and ZPA capabilities from Zenith Live 2026 aimed at inline, post-quantum-aware inspection at machine speed. more →
Zscaler, Wednesday, September 30th, 2026
ZDX Agent: Bringing Agentic Intelligence to SASE Operations
Zscaler's ZDX Agent uses agentic AI to pinpoint whether user experience issues stem from the device, network, Zscaler or the app. more →
Zscaler, Wednesday, September 30th, 2026
Ransomware Leverage Is Growing by the Terabyte: Takeaways from ThreatLabz 2026 Ransomware Report
Zscaler releases its ThreatLabz 2026 Ransomware Report, citing terabyte-scale data theft, Teams vishing and shifting gangs. more →