Dark Reading, Monday, September 28th, 2026
AI Agents Are Privileged Users; Who Is Auditing Their Access?
An IT audit leader argues AI agents should be governed as privileged identities, with ownership, logging, access reviews and containment. more →
This WeekHome →Calendar →Back Issues/Search →Archive →RSS →Subscribe →
Wednesday’s Briefing · October 7
Data Center Knowledge, Monday, September 28th, 2026
The Next Generation of AI Infrastructure Design Starts with Efficiency
AI data centers need a systems-level design that weighs power, cooling and compute together, measured by more than PUE alone. more →
InfoWorld, Tuesday, September 29th, 2026
Why Faster AI Coding Can Mean Harder Engineering
Matt Asay argues AI coding agents make engineering faster but more demanding, so companies shouldn't cut expertise. more →
InfoWorld, Wednesday, September 30th, 2026
Observability for AI-Native Systems: New SLIs Beyond Latency and Error Rate
Defines AI-specific SLIs such as task accuracy, hallucination rate and cost per successful task for LLM systems. more →
No Jitter, Tuesday, September 29th, 2026
AI Agents Need Identities, Not Just Permissions
Enterprises should give each AI agent a persistent identity record covering its purpose, human owner, delegated permissions and expiry. more →
RTInsights, Thursday, October 1st, 2026
Enterprises Don't Need Bigger AI Models. They Need Better AI Architecture.
Enterprise AI advantage is shifting from model selection to system design that routes work to the right model or tool. more →
ZDNET, Thursday, October 1st, 2026
Who Owns AI Risk at Work? Business and Tech Leaders Can't Agree, PwC Survey Finds
PwC's survey of 4,000 leaders finds no consensus on who is accountable for agentic AI risk and security. more →
Beyond the Coding Agent: How the Software Delivery Agent Closes the Gap to Production (Oct. 15)
Join Harness for a look at how the Software Delivery Agent takes every code, infrastructure, and database change safely through production, at machine speed, under the policies your team defines. more →
You've Been Heard: The IT Leadership Podcast, Tuesday, September 29th, 2026
458- Stop Turning the Light Off w/John Errington
IT leader John Errington explains why teams should automate recurring fixes and how AI speeds incident postmortems. more →
You've Been Heard: The IT Leadership Podcast, Wednesday, September 30th, 2026
459- Make the Approved Path Fast Enough w/Brandon Muncy
PepperPointe IT lead Brandon Muncy on winning trust one visible fix at a time and making approved AI faster than shadow AI. more →
DevOps.com, Thursday, October 1st, 2026
AWS AI Agent Surfaces Recommendations to Optimize Cloud Computing Environments
AWS previews the Well-Architected Agent, which recommends cost, security, performance and resilience fixes with code. more →
DevOps.com, Monday, September 28th, 2026
Headless DevOps Gives AI Agents Access to Delivery Workflows
Copado's Federico Larsen explains exposing DevOps platforms to AI agents via APIs, CLIs and MCP without losing controls. more →
DevOps.com, Thursday, October 1st, 2026
Introducing Futurum Media: Why Futurum, Why Now?
Futurum launches Futurum Media, combining Techstrong, Tech Field Day and Visible Impact under one umbrella. more →
DevOps.com, Monday, September 28th, 2026
Keeping Humans Accountable as AI Agents Take On the SDLC
Atlassian's Ming Wu says governed agent loops can automate SDLC work, but people must stay accountable for results. more →
DevOps.com, Wednesday, September 30th, 2026
Survey Surfaces Sharp Increase in Amount of Code Written by AI
A survey of 705 developers finds 42% say AI now writes at least half their code, shifting time to review and debugging. more →
DevOps.com, Friday, October 2nd, 2026
The DevOps Standard Gives Teams a Shared Model for Software Delivery
PeopleCert's new DevOps Institute book, The DevOps Standard, offers a vendor-neutral definition and operating model. more →
SC Media, Monday, September 28th, 2026
Why Identity, Not the Network, Has to Be the Perimeter
In Kubernetes and multi-cloud, zero trust must rest on cryptographic workload identity, not ephemeral network location. more →
SecurityWeek, Thursday, October 1st, 2026
Zero Trust Creator Says Model Holds Firm Against AI-Assisted Attacks
John Kindervag's new book argues zero trust still works against AI-driven attacks, but only if the policy engine is implemented correctly. more →
TechTarget, Tuesday, September 29th, 2026
Why Cybersecurity's Future Isn't AI vs. Humans - It's Both
Government cyber leaders at the Billington Summit say AI augments human defenders rather than replacing them. more →
TechTarget, Monday, September 28th, 2026
Shadow AI Agents: What CISOs Need to Know
Shadow AI agents are spreading as business units bypass IT, and shadow AI-driven breaches have more than doubled. more →
Network World, Monday, September 28th, 2026
Why a Network Digital Twin Is the Missing Piece for AI-Era Operations
As AI agents start making network changes, a mathematical digital twin is needed to predict the impact of a change before it reaches production. more →
Cloud Native: The AI Stack
The same stack. Infinite possibilities -- AI-native applications are built on the same technologies, practices, and platforms that cloud native pioneered. From infrastructure to intelligence, it's all cloud native. more →
CDOTrends, Thursday, October 1st, 2026
When Production AI Fails Silently: An Engineering Playbook for Building Reliable AI Systems
A playbook explains how production AI degrades without visible errors and what evaluation, observability and governance practices catch it. more →
Cybersecurity Dive, Thursday, October 1st, 2026
SOC Staffers Generally Pleased With AI's Impact, but Worries Remain
A survey of 500 SOC workers finds AI boosts job satisfaction and skills, though many fear fewer entry-level roles and over-reliance. more →
Data Center Knowledge, Friday, October 2nd, 2026
Five Ways to Assess Your AI Infrastructure Readiness
A five-part framework for checking AI readiness across performance, power and cooling, security, cost strategy and scalability. more →
Data Center Knowledge, Wednesday, September 30th, 2026
Data Center On-Site Power Brings Pollution Risks Closer to Home
A $1.07M New Jersey penalty over unpermitted gas generators shows the environmental compliance risks of on-site data center power. more →
Data Center Knowledge, Thursday, October 1st, 2026
The Hidden Failure Domain in N+1 Data Center Cooling
Redundant cooling equipment can still fail together when pumps and CRAHs share a single controller, network path or sensor. more →
Data Center Knowledge, Friday, October 2nd, 2026
From Opposition to Buy-In: Tactics for Data Center Developers
Facing growing community pushback, data center developers are leaning on transparency, grid funding and local benefits. more →
TechnologyAdvice, Sunday, September 27th, 2026
5 Best HR Apps for 2026
TechnologyAdvice compares 15 mobile HR apps and picks five for time off, pay, scheduling and approvals on the go. more →
TechnologyAdvice, Tuesday, September 29th, 2026
Best HRIS Systems in 2026
After reviewing 11 HRIS providers, TechnologyAdvice names Gusto best overall, with BambooHR and GoCo also standing out. more →
CIO, Tuesday, September 29th, 2026
What Do You Do With an AI Conscientious Objector?
A tech leader explains how they handled an employee refusing to use AI, while holding them to AI-era benchmarks. more →
CIO Dive, Thursday, October 1st, 2026
Tech Skills Gaps Are Stopping Projects in Their Tracks
Pluralsight research finds skills gaps push most tech projects over budget, with many firms wasting $250,000 or more. more →
Help Net Security, Friday, October 2nd, 2026
Criminal Recruiters Want People on Your Payroll
Research on underground forums shows criminals recruiting insiders to sell account resets, lookups, SIM swaps and shipment changes. more →
HR Dive, Wednesday, September 30th, 2026
Technology Isn't Yet Solving HR's Workflow Problems
Despite AI adoption, 51% of HR pros still spend half their week on repetitive admin, an Eagle Hill survey finds. more →
Akamai Technologies, Wednesday, September 30th, 2026
When Productivity Extensions Become Attack Platforms
Akamai's LayerX researchers expose 32 malicious Chrome and Edge extensions that spy on users and commit affiliate fraud via remote configs. more →
Engineered for What's Next: Rubrik and AWS Cyber Resiliency for Enterprise Workloads
Join speakers from Rubrik and AWS to explore how leveraging Rubrik and AWS minimizes security blind spots, reduces blast radiuses, and enables rapid recovery. Discover how to turn your data into an advantage that lets you build and scale with certainty - no matter what comes next. more →
Cloudflare, Friday, October 2nd, 2026
Follow the Thread: A New Dashboard to Investigate Account Abuse
Cloudflare's new Account Abuse Protection dashboard uses stateful analysis and hashed user IDs to investigate and block AI-driven fraud. more →
Cloudflare, Thursday, October 1st, 2026
Introducing Clef: Our Open-Source Decision Models, and New RL Fine-Tuning Platform
Cloudflare releases Clef and Clef-flash, open-source decision models on Workers AI, plus an RL platform to fine-tune them on your data. more →
Cloudflare, Thursday, October 1st, 2026
Introducing Cloudflare Basin: An Open, Serverless Data Platform, Now Generally Available
Cloudflare's data platform reaches GA as Basin, a serverless Apache Iceberg analytics stack on R2 with no egress fees. more →
Cloudflare, Thursday, October 1st, 2026
Announcing Cloudflare K2: Serverless Event Streams
Cloudflare K2, now in public beta, is a serverless event streaming service built on R2 for durable, ordered log streams. more →
Cloudflare, Friday, October 2nd, 2026
Introducing Cloudflare Traces: Follow Requests Through Our Entire Platform
Cloudflare Traces, now in open beta, shows how each request moves through security rules, cache, routing, Workers and origin. more →
Cloudflare, Friday, October 2nd, 2026
Introducing Web Search API via AI Gateway
Cloudflare AI Gateway adds a native web search API so agents can ground model calls in live web results instead of guessing URLs. more →
Darktrace, Wednesday, September 30th, 2026
AI-Assisted Attacks Still Leave a Behavioral Trace
Darktrace shows how behavioral analysis caught two AI-assisted campaigns through WebDAV transfers, beaconing and C2 traffic. more →
Benchmark Scores Are a False Flag
This session covers what he found and the harder question underneath it. The industry already knows these benchmarks are saturated. The problem starts earlier, in how we build them. If you write the test from an answer key and work backward, what are you measuring? more →
Databricks, Thursday, October 1st, 2026
Lakebase Postgres Branch-Based Restores for Fast Recovery at Scale
Lakebase Postgres uses branch-based restores to recover even 100 TB databases in seconds instead of hours. more →
Databricks, Wednesday, September 30th, 2026
A Practical Guide to Cost Optimization with Lakebase Postgres
Tips for controlling Lakebase Postgres costs: sync only working data, match sync mode to freshness and right-size compute. more →
Databricks, Friday, October 2nd, 2026
Real-Time Retail Intelligence: Building E-Commerce Recommendations with Lakebase and AI Search on Databricks
Reference architecture for a real-time e-commerce recommendation engine on Databricks using Zerobus, Model Serving, Lakebase and AI Search. more →
How to Leverage Threat Intelligence Without Drowning: The Zero Noise Approach
This session introduces the Zero Noise Approach - a methodology for ingesting and operationalizing Cloud TI through attacker-based baselines, continuous feedback loops, and a 'no alert left behind' mindset. more →
Dell, Monday, September 28th, 2026
A New Era of AI Agents Demands a New Security Model
Dell outlines how the NVIDIA Open Agent Safety Platform on Dell AI Factory enforces AI agent boundaries at runtime, network and silicon layers. more →
Dell, Monday, September 28th, 2026
The Best AI Data Architecture Fits the Estate You Already Have
Dell urges AI data platform buyers to look past converged vendor messaging and pick architectures that fit data where it already lives. more →
SiliconANGLE, Tuesday, September 29th, 2026
Enterprise AI Deployment Strategy Shaped by Cost and Control
At Dell's AI Leadership Symposium, experts say token costs and governance are reshaping where and how enterprises run AI. more →
StorageReview, Wednesday, September 30th, 2026
Dell PowerStoreOS 5.0 Deep Dive: The Software Half of the Elite Reset
PowerStoreOS 5.0 runs across all PowerStore generations, letting mixed fleets cluster and work as one system. more →
Dynatrace, Tuesday, September 29th, 2026
A Design Refresh for Every Dynatrace App, Including Yours
Dynatrace ships a UI refresh to every app at once via its Strato design system, adding value-based filters and reusable time ranges. more →
Dynatrace, Friday, October 2nd, 2026
From Symptom to Fix in Minutes: AI-Assisted Development with Dynatrace MCP
Dynatrace shows how its MCP Server lets AI coding agents use live observability data to trace slowdowns to specific lines of code. more →
Huntress, Monday, September 28th, 2026
Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix
Huntress found attackers using ChatGPT Custom GPTs to impersonate products and push a ClickFix lure that installs a RAT. more →
Huntress, Thursday, October 1st, 2026
The Huntress Tragic Quadrant: Beat the Hype on Cyber Tactics Wrecking Businesses
Huntress ranks attacker tactics by prevalence and proximity to business disruption, topped by RMM abuse, BEC and AiTM takeover. more →
Huntress, Friday, October 2nd, 2026
Companies Push AI Use, But Many Skip Training (43%) and Official Policies (26%)
A Huntress survey finds 43% of knowledge workers got no AI training and 74% could not spot a prompt injection risk. more →
Huntress, Monday, September 28th, 2026
What Good Privilege Hygiene Looks Like
Huntress outlines least-privilege practices to curb local admin sprawl, sticky admin sessions and accidental SaaS admins. more →
Huntress, Friday, October 2nd, 2026
The First 24 Hours: What Actually Happens When Ransomware Lands
Huntress walks through the first day of a ransomware incident hour by hour, from discovery to recovery decisions. more →
Speed to Power: Building for Reliable Operations
Drawing on 25+ years of mission-critical commissioning and complex energy infrastructure experience, Veolia experts will share strategies for reducing risk, protecting uptime and maximizing the value of every available megawatt. A real-world case study of a 350 MW microgrid supporting a hyperscale AI data center campus will show these strategies in action. more →
Leidos, Tuesday, September 29th, 2026
The Changing Cyber Landscape: 5 Operator Priorities
Leidos shares five cyber takeaways from the Billington CyberSecurity Summit, from AI-speed attacks to identity threats. more →
Leidos, Tuesday, September 29th, 2026
Leidos Launches Agentic AI Platform to Speed Response to Cyber Threats
Leidos launches UpHold Effect Agentic SOC Automation, using AI agents to triage alerts around the clock, with a FedRAMP High option. more →
Microsoft, Monday, September 28th, 2026
Enhancing Microsoft Azure Virtual Machine Lifecycle
Azure introduces a VM Lifecycle policy with Current, Extended, End of Life and Retired stages to help customers plan migrations. more →
Microsoft, Wednesday, September 30th, 2026
Responsible Infrastructure at Hyperscale: Managing the Full Lifecycle of Azure Hardware
Azure details denser, more efficient datacenter hardware and new Circular Centers in Wales and Sydney for reusing retired equipment. more →
Microsoft, Monday, September 28th, 2026
New Microsoft Data Innovations Unlock What Only Your Business Knows
Microsoft announces Fabric and Azure database advances, including Fabric IQ grounding Copilot in governed Power BI semantic models. more →
Microsoft, Monday, September 28th, 2026
NeedyMantis: Unpacking a Post-Compromise Malware Family Used in Targeted Operations
Microsoft details NeedyMantis, a modular post-compromise malware framework used for long-term access in targeted intrusions. more →
Microsoft, Tuesday, September 29th, 2026
Beyond Source Code: A Path to the Keys to the Kingdom
Microsoft DART details how Storm-3068 turned a password reset into access to Azure DevOps pipelines and Kubernetes resources. more →
Microsoft, Thursday, October 1st, 2026
Insights from the 2026 Microsoft Digital Defense Report
Microsoft releases its 2026 Digital Defense Report, highlighting how threats span identities, cloud, supply chains and AI agents. more →
Rapid7, Thursday, October 1st, 2026
How AI Is Changing the Roles Required in the Security Operations Center
Rapid7 highlights Gartner research on how SOC roles, skills and KPIs must be redesigned as AI takes over triage work. more →
Rapid7, Wednesday, September 30th, 2026
Higher Education Is Under Siege, and Fragmented Security Is Making It Harder to Respond
Rapid7 on why universities are hard to secure and how fragmented tooling slows their response to rising attacks. more →
Rapid7, Friday, October 2nd, 2026
SMTP Is the Key: BPFDoor and AVERAT Hitting the Network Edge
Rapid7 analyzes a new BPFDoor variant, a BPF Rekoobe build and the AVERAT Linux implant targeting telecom and edge devices. more →
Tech Spotlight - What AI Means for Identity Security
In this session, Nathan O'Bryan (5x Microsoft MVP, Microsoft Certified Solutions Master, 30+ year veteran Active Directory administrator) will cover how changes in technology have shaped the way IT departments do Identity and Access Management. more →
Riverbed, Monday, September 28th, 2026
Network 360: Operationalizing Intelligent Network Observability
Riverbed explains how Network 360 extends existing network monitoring to endpoints with AI-powered intelligence and automation. more →
Expert Panel: Reinventing Data Management for Enterprise Innovation
This session focuses on how to modernize by taking advantage of the latest technologies, cloud data platforms and services, and best practices. Panelists will offer guidance for accelerating your evolution toward AI-driven automation, higher scalability, and continuous adaptation. more →
Salesforce, Tuesday, September 29th, 2026
Agentic AI and the Future of Work: What It Means for Salesforce Practitioners
Salesforce looks at how agentic AI is changing what practitioners build and how they work, and where roles go next. more →
Salesforce, Thursday, October 1st, 2026
What's New in B2C Commerce: The September 2026 Release
Salesforce B2C Commerce's September 2026 release adds merchandising tools, consent integrations, security updates and developer features. more →
Salesforce, Thursday, October 1st, 2026
Agents Can Mimic Good Design. Ours Know Why It Works
Salesforce uses design skills, linters and evals so coding agents produce consistent, accessible, production-ready UI. more →
Salesforce, Wednesday, September 30th, 2026
The Tableau Knowledge Engine: How We Built Trustworthy Agentic Analytics
Tableau explains its knowledge engine, a runtime layer giving analytics agents a reliable understanding of business meaning. more →
Salesforce, Friday, October 2nd, 2026
Unpacking Dreamforce: Why Your AI Needs Trusted Context
Dreamforce takeaways on how Data 360, the Agent Context Engine and Agentforce Coworker give AI agents trusted business context. more →
Salesforce, Thursday, October 1st, 2026
Getting to ROI: How Brands Turn Cost Centers into Revenue Engines with AI
AT&T, Southwest, Canada Goose and other Salesforce customers share lessons on getting ROI from agentic AI deployments. more →
Sophos, Thursday, October 1st, 2026
Sophos CISO Advantage Is Now Generally Available
Sophos CISO Advantage is now GA, giving organizations and MSPs framework-mapped control evidence, roadmaps and board reporting. more →
Sophos, Tuesday, September 29th, 2026
Jev's Paradox: The Hidden Cost of Cheap AI Decisions
Sophos examines how cheap classifier-style AI decisions could multiply total errors if accuracy and calibration fall short. more →
Sophos, Wednesday, September 30th, 2026
Sophos Firewall v23 Is Now in Early Access
Sophos Firewall v23 enters early access with 30+ requested features, including a REST API and AI-powered firewall assistant. more →
Sophos, Wednesday, September 30th, 2026
TerminalFix and Lorem Ipsum Loader Enable Covert Tunneling
Sophos details STAC4924, a campaign using TerminalFix lures and Lorem Ipsum Loader to deploy a Python tunneling implant. more →
Trellix, Wednesday, September 30th, 2026
Beyond the Blind Spots: 5 Reasons Your Modern Security Stack Is Still Failing
Trellix argues EDR, SASE and ZTNA leave gaps against living-off-the-land attacks and makes the case for active network detection and response. more →
The AI-Powered Modernization Playbook for Financial Services: Secure Migration, Modernization & the AI-Driven Development Lifecycle
Join PwC and AWS for a discussion on how AI is redefining cloud modernization priorities. We'll share examples from leaders in their sectors, as well as practical recommendations for building modern cloud platforms that deliver measurable business value, while navigating evolving regulatory, risk, and operational considerations. more →
Zscaler, Wednesday, September 30th, 2026
When Your Team Includes Non-Humans, Leadership Changes
Zscaler CISO Sam Curry argues agentic AI makes accountability, not authority, the central leadership problem for enterprises. more →
Zscaler, Monday, September 28th, 2026
What's New in Zscaler SSE
Zscaler outlines new ZIA and ZPA capabilities from Zenith Live 2026 aimed at inline, post-quantum-aware inspection at machine speed. more →
Zscaler, Wednesday, September 30th, 2026
ZDX Agent: Bringing Agentic Intelligence to SASE Operations
Zscaler's ZDX Agent uses agentic AI to pinpoint whether user experience issues stem from the device, network, Zscaler or the app. more →
Zscaler, Wednesday, September 30th, 2026
Ransomware Leverage Is Growing by the Terabyte: Takeaways from ThreatLabz 2026 Ransomware Report
Zscaler releases its ThreatLabz 2026 Ransomware Report, citing terabyte-scale data theft, Teams vishing and shifting gangs. more →