Sovereignty & Compliance

Europe's Sovereignty Package Draws a Line Most Clouds Will Not Cross

The Commission's Technological Sovereignty Package — Chips Act 2.0 and the Cloud and AI Development Act — grades cloud services on a four-level sovereignty scale. Defence-pushback shows the

AI Security

Microsoft's Network DLP Now Watches AI Agent Uploads. Roll It Out in Audit Mode

Purview network DLP on Entra Global Secure Access blocks sensitive data at the network layer — including traffic an AI agent sends on a user's behalf. The licensing and limits deserve scruti

Software Supply Chain

AI Coding Agents Now Ship Software. Plugin4Shell Shows Nobody Checks the Package

A zero-click plugin swap bypasses SHA pinning in four major AI coding agents. The fix has to ship in the agent itself, and updating is only the complete remedy where one exists.

Security Operations

AWS Frontier Agents Earn Autonomy by Keeping an Approval Gate

AWS Security Agent and DevOps Agent are now generally available. The autonomy is real — the approval gate is what makes it shippable. Netics on where the boundary should sit.

AI Agents

The OpenAI Agents API Makes the Harness a Managed Product

OpenAI's Agents API turns the Codex harness into a managed service with hosted sandboxes. Netics on why the interesting boundary is the sandbox, not the model.

AI Agents

Salesforce on Google Cloud: The Agent Stack Gets a Shared Foundation

Salesforce and Google Cloud are unifying infrastructure and agents: Hyperforce on Google Cloud, Gemini Enterprise with Salesforce data via MCP, and Zero Copy data sharing. Netics on what is

Serverless & Edge

Worker Previews Give Every Change a Place to Prove Itself

Cloudflare Worker Previews give each Git branch its own production-like environment — URL, state, and observability included. Netics on why this is the missing evidence loop for agent-writte

AI Compute & Chips

NVIDIA Topograph Treats GPU Placement as a Live Topology Problem

NVIDIA's open-source Topograph discovers cluster topology from cloud APIs or on-prem fabrics and publishes it as Kubernetes labels, Slurm config, or Slinky ConfigMaps. Netics on why topology

LLMs & Models

GPT-6 Prompt Caching Makes Latency and Cost an Engineering Choice

OpenAI's GPT-6 prompt caching brings dashboards, diagnostics, breakpoints, and prewarming. Netics on why caching is an economic layer agents must be architected around, not a vendor convenie

Strategy & Market

The AI Labs' Public Pacing Calls Are Now Antitrust Evidence

Four subscribers filed a class action against Anthropic, OpenAI, SpaceXAI and Google over the September 12 pacing coordination. Netics reads the complaint: what it gets right, what it conced

DevOps & CI/CD

Executing Workflows Should Be a Permission, Not a Default

GitHub Actions execution protections went GA, with workflow file targeting and a default rule that disables pull_request_target. Netics on why trigger control is now a first-class CI/CD secu

Kubernetes & Containers

Kubernetes v1.37 Hardens the Volume You Already Mount

Kubernetes v1.37 adds emptyDir permission modes and bind mount options — the first native way to put noexec, nosuid and nodev on any volume. Netics on why the highest-value security gap in K

AI Compute & Chips

Benchmarking LLM Inference Needs a Real Load Client

NVIDIA's AIPerf replaces GenAI-Perf with a multiprocess load client that stops being the bottleneck. Netics on why LLM inference numbers are only worth as much as the client generating them.

Vulnerabilities & Exploits

A CVSS-10 Path Traversal in GitLab's Commits API Is Being Exploited

GitLab patched a maximum-severity unauthenticated file-read flaw in the repository commits API and CISA added it to the KEV catalog. Netics on why CVSS 10.0 in a self-managed DevSecOps tool

Cryptography & Post-Quantum

Java 27 Turns On Post-Quantum TLS by Default

JDK 27 ships hybrid key exchange for TLS 1.3 with X25519MLKEM768 first in the default list. Netics on why a default-on post-quantum handshake in the most widely deployed runtime is a bigger

AI Governance

Search or AI Training: Cloudflare Makes Crawlers Accountable

Cloudflare's Accountable designation and Disallow AI Training split search indexing from AI training for the first time. Netics looks at the mechanism, the four criteria, and what publishers

LLMs & Models

Anthropic's 26% Is a Measurement Story Before It Is a Warning

Anthropic revealed Claude "leads" 26% of its AI R&D and published the methodology behind the number. Netics reads the metric design: what 26%, 90%, and 30,000 agents really show, and what st

Devices & Mobile

Android's Security Posture Just Got an API

Google's Security-State libraries give Android fleets a single programmatic view of patch status across OS, modules, and kernel — an Effective Security State that replaces the coarse SPL che

AI Compute & Chips

Quantum Readiness Gets a Scoreboard: CUDA-Q Logical and the QUOPS Benchmark

NVIDIA's CUDA-Q Logical orchestration layer and Sandia's QUOPS benchmark give fault-tolerant quantum computing something it lacked: a measurable readiness test. Netics explains why that matt

AI Security

Meta's Muse Tries to Make the Consumer Agent a Secure Computer

Meta's Muse personal agent ships with a dedicated Secure VM and a separate Sentinel approval agent. Netics explains what the architecture gets right and what it still leaves open.

AI Compute & Chips

CUDA Rust's Two Tracks Put Memory Safety Back in the Compiler

NVIDIA ships two compiler tracks for writing GPU kernels in Rust. Netics explains why compile-time memory safety changes kernel engineering more than the language switch does.

Strategy & Market

OpenAI Ads Manager Campaign Architecture: Budgets, Bids, and Measurement Contracts

OpenAI Ads Manager exposes a campaign hierarchy. Netics explains why its IDs, budgets, bids, creative, and tracking rules form a control contract.

Strategy & Market

OpenAI Ads Manager Moves Campaign Operations Into an Operating Layer

OpenAI is testing Sponsored Agents and adding natural-language campaign tools, but the useful shift is operational: review, labeling, privacy, and approval still define the boundary.

Strategy & Market

ChatGPT Ads measurement needs an explicit boundary

OpenAI is adding self-serve buying and conversion tools to ChatGPT Ads. Netics argues that measurement is useful only when conversion and privacy boundaries are explicit.

LLMs & Models

Google AI Studio Turns Gemini API Spending Into an Operating Control

TL;DR Google AI Studio now gives Gemini API teams four useful control surfaces: per-project Project Spend Caps, revamped Usage Tiers, billing-account tier caps, and billing, rate-limit, cost, and usage dashboards. The cap is persistent until a project owner changes or disables it, but Google documents a roughly 10-minute delay