Browsing Category
Enterprise Tech
146 posts
Enterprise software, IT operations platforms, business infrastructure, observability, SaaS, and workplace technology coverage.
CISA Puts FortiSandbox Exploits on an Emergency Patch Clock
CISA added two Fortinet FortiSandbox command-injection flaws to its exploited-vulnerabilities catalog on July 16, giving federal agencies until July 19 to remediate. Security teams should patch affected FortiSandbox systems, restrict management access, and review logs and connected credentials if exposure existed before the upgrade.
Cisco ISE Flaws Put Network Access Control on a Patch Clock
Cisco patched two Identity Services Engine flaws that can expose hashed credentials and let an authenticated attacker run commands on the underlying operating system. The urgency is highest for teams running ISE 3.4, ISE 3.5, or ISE-PIC, especially because one Cisco ISE 3.5 fix is not due in the normal patch stream until August.
AWS AgentCore Turns Enterprise AI Agents Into an Operations Stack
AWS used its New York Summit to expand Bedrock AgentCore, launch AWS Context and AWS Continuum, and push AI agents deeper into enterprise operations. The real story is not another chatbot layer, but a managed stack for grounding, governing, testing, and remediating agent behavior.
AWS WAF Gives Publishers a Way to Charge AI Bots at the Edge
AWS WAF now lets CloudFront publishers charge AI bots and agents per request using HTTP 402, x402 payments, Coinbase settlement, and stablecoins. The launch turns AI crawler access into an edge-security and machine-payments problem.
SearchLeak Shows How Microsoft 365 Copilot Search Can Become a Data Leak
Varonis disclosed SearchLeak, a patched Microsoft 365 Copilot Enterprise Search vulnerability chain that could turn one trusted-looking Microsoft link into a path for stealing emails, files, calendar data, and MFA codes.
F5’s Emergency NGINX Patches Put Web Server Teams on a Fast Upgrade Clock
F5 issued out-of-band NGINX updates for flaws affecting HTTP/3, proxy protocol, gRPC, Gateway Fabric, and related products. Teams running internet-facing NGINX should check versions, exposed modules, Kubernetes ingress paths, and temporary mitigations before treating this as routine patching.
Accenture’s Dragos Deal Puts OT Security on an AI Threat Clock
Accenture agreed to take a majority stake in Dragos and buy runZero and NetRise, creating a $4.175 billion bet on operational technology security as AI and geopolitical risk push industrial systems onto the cybersecurity agenda.
Microsoft MDASH Moves AI Bug Hunting Into Real Security Workflows
Microsoft says its MDASH agentic security system is now being used across Windows, Azure, and identity workflows, with new findings in Hyper-V, HTTP.sys, the Windows kernel, and Active Directory. The update shows AI vulnerability discovery moving from benchmark claims toward real engineering pipelines, while proof generation remains the hard part.
HPE Turns Juniper Into the Network Layer for AI Factories
HPE used Discover 2026 to fold Juniper deeper into its AI data center strategy, adding QFX switches for inference and AMD Helios, Mist and Marvis AIOps updates, and SASE controls for self-driving networks.
MLPerf Training 6.0 Makes AI Infrastructure a Sparse-Model Race
MLCommons released MLPerf Training 6.0 with new DeepSeek V3 and GPT-OSS 20B benchmarks, while NVIDIA, AMD, and cloud providers used the round to show how AI training is moving toward sparse models, rack-scale systems, and verified cloud capacity.