AI Security
Security implications of AI, including prompt injection, model abuse, cyber capabilities, data leakage, agent security, and defensive AI.
Legacy Infrastructure Is Slowing Enterprise Agentic AI Adoption
Kris Lovejoy, global strategy leader at Kyndryl, argues that enterprises are not being held back from agentic AI mainly by model capability or startup speed, but by the difficulty of running agents securely and reliably inside legacy infrastructure. In a conversation with Craig Smith, she says pilots are widespread but scaled deployments remain rare because agents need context, governance, compliance controls and modernized IT foundations before they can touch core systems. Her near-term prediction is narrower than much of the hype: by about 2031, agentic AI may handle roughly half of traditional line-one and line-two IT administration tasks, with humans still supervising the loop.
AI Cyber Models Push Trump Administration Toward Pre-Release Safety Reviews
Kevin Roose and Casey Newton argue that the Trump administration’s shift toward AI safety is being driven by frontier models that can find and chain software vulnerabilities, not by a broad ideological conversion. Drawing on New York Times reporting about a possible executive order for pre-release model review, they describe a policy scramble over Anthropic’s Mythos, chip access to China and which federal agency should judge dangerous models. Nikesh Arora, Palo Alto Networks’ chief executive, says the cyber problem is already operational: attacks that once unfolded over days may soon move in minutes.
Supabase Says Skills and MCP Close the Agent Context Gap
Pedro Rodrigues of Supabase argues that agents fail on production systems less because they cannot reason than because they lack product-specific judgment. In a test using the same Postgres task, Supabase found that Claude with MCP alone created a view that could bypass row-level security, while MCP plus a Supabase skill added the required `security_invoker = true` flag. Rodrigues’s case is that MCP gives agents tools, but skills supply the rules, workflows, and current documentation paths needed to use those tools safely.
Codex Is Moving From Code Generation to Delegated Knowledge Work
Codex is moving from a coding assistant toward an agent for delegated knowledge work, according to Thibault Sottiaux, OpenAI’s head of Codex. In an OpenAI Forum conversation with Chris Nicholson of OpenAI Global Affairs, Sottiaux argues that as models have become more reliable and better connected to workplace context, Codex is being used to research, organize information, create files and presentations, coordinate across tools, and run background tasks. That shift, he says, makes delegation, trust and access controls central as agents act across files, communications tools and company systems.
Agent Observability Is Moving From Dashboards to Eval-Driven Optimization
Amy Boyd and Nitya Narasimhan of Microsoft argue that agent observability has to track the widening gap between what an AI agent is meant to do and what it actually does as models, prompts, tools and user behavior change. Their walkthrough of Microsoft Foundry frames observability as a loop of OpenTelemetry tracing, trace-linked evaluations, monitoring, optimization and red teaming. The central demonstration is an observe skill that can generate an evaluation dataset, run batch tests, optimize prompts, compare versions and roll back to the best-performing agent version from a sparse starting point.
GitHub Agentic Workflows Turn Actions Into AI-Run Development Processes
Microsoft Research’s Peli Halleux and Yash Lara present GitHub Agentic Workflows as a move from AI-assisted coding to repository-level process automation. Their argument is that agents should be embedded inside GitHub Actions to research, plan, assign, and open pull requests under human review, rather than operate as unconstrained swarms. The system’s promised scale depends on orchestration, sandboxing, limited permissions, and Microsoft-hosted models on Azure.
Trump-Xi Summit Puts Rare Earths, AI Chips, and Taiwan at Center Stage
Diet TBPN’s John Coogan and Jordi Hays frame the Trump-Xi summit as a bid for stability shaped by rare earths, advanced chips, Taiwan, and the industrial leaders traveling with Trump. Coogan treats Nvidia chief Jensen Huang’s presence as the clearest pressure point in that diplomacy, while stopping short of fully endorsing the charge that Washington’s AI policy is incoherent. The same search for stability, as the hosts present it, runs into specific limits elsewhere: gated access to Anthropic’s Mythos versus chip negotiations with China, orbital data-center ambitions versus launch and power constraints, and inflation relief versus energy and commodity shocks.
Computing Is Shifting From Prerecorded Execution to Continuous Generation
In a Stanford CS153 Frontier Systems lecture, NVIDIA chief executive Jensen Huang argues that AI is forcing the first fundamental reinvention of computing in decades, moving the industry from prerecorded, on-demand execution to continuous real-time generation. Huang says that shift requires rebuilding the full stack — chips, compilers, networks, storage, systems and institutions — around new bottlenecks, with NVIDIA’s co-design approach producing gains that conventional Moore’s Law scaling cannot match.
Compute Allocation Is Anthropic’s Core Constraint as Claude Revenue Surges
Anthropic CFO Krishna Rao argues that the company’s rise is best understood through compute: a scarce capital asset that must be bought years ahead and constantly reallocated across model training, customer demand, internal automation and future products. In an interview with Patrick O’Shaughnessy, Rao says ordinary forecasting and software-margin frameworks break down when model capability, adoption and revenue compound together, leaving Anthropic to manage growth through scenarios rather than point estimates.
Cerebras Seeks $4.8 Billion as AI Compute Demand Lifts IPO Market
Bloomberg Technology’s Caroline Hyde and Ed Ludlow framed Cerebras’ upsized IPO as part of a wider shift in which AI infrastructure is drawing capital across chips, data centers, power, payments and security. Bloomberg’s Rebecca Torrence said the Cerebras offering was more than 20 times oversubscribed, while other guests argued that investor demand is being supported by earnings growth, capacity constraints and expanding use cases rather than chips alone. The broadcast’s through-line was that the AI buildout is becoming a market-wide infrastructure trade, with financing, energy supply, stablecoins, cybersecurity and local hardware all pulled into the same investment case.
Real AI Gains Are Powering Unproven Compute, IPO, and Layoff Narratives
Alex Kantrowitz and Ranjan Roy read Anthropic’s SpaceX compute deal as both a real answer to Claude’s capacity constraints and a piece of market theater around AI demand, financing and IPO timing. Kantrowitz argues the Colossus 1 capacity could materially ease Anthropic’s limits and sharpen its race with OpenAI; Roy cautions that explosive usage and infrastructure announcements are also serving valuation narratives. The discussion extends that frame to OpenAI trial messages, Anthropic’s Mythos security claims and AI-linked layoffs: genuine progress, they argue, is being folded into stories that remain only partly proven.
Coding Agents Work Best When Products Expose Simple Tools
Matthias Luebken argues that coding agents such as OpenClaw are less mysterious than they appear: they are LLMs calling tools in a loop, made more useful by a runtime, shell, sessions and product hooks. In his Tavon talk, he uses Pi, a minimal coding-agent SDK, to show how that loop can be embedded inside business software, including a sales workflow where RFP emails are routed to customer-specific agent sessions and returned to users as draft replies. His architectural point is that teams should not force agents through opaque systems, but expose data, commands and controls in forms coding agents can use cleanly.
Slack-Native AI Coworkers Turn Memory and Permissions Into Product Risks
Fryderyk Wiatrowski argues that building Viktor as an AI coworker inside Slack is not a matter of scaling a personal assistant to more users. A company-level agent gains value from shared context, shared integrations, and the ability to act where work is discussed, but those same features create harder problems around memory isolation, permissions, fragmented Slack conversations, proactivity, and tone. His case is that an “AI employee” has to be designed less like a chatbot and more like a new hire entering the company’s communication layer.
SpaceX-Anthropic Deal Highlights Compute as AI’s Revenue Bottleneck
The All-In panel used SpaceX’s compute deal with Anthropic to argue that frontier AI is now being constrained less by demand than by access to power, GPUs and data-center capacity. David Sacks warned that Anthropic’s reported revenue trajectory could make it a historic monopoly if sustained, while Brad Gerstner pushed back that the market is still too early and competitive for pre-emptive regulation. The discussion turned on whether AI safety concerns justify coordination with government or risk becoming an “FDA for AI,” and whether the AI boom will ultimately show up as measurable productivity and profit for customers buying tokens.
GPT-5.5 Instant Cuts High-Stakes Errors but Exposes Safety Gaps
Károly Zsolnai-Fehér argues that OpenAI’s GPT-5.5 Instant matters because it is the default ChatGPT model used at scale, not because it is the flashiest frontier system. His reading of OpenAI’s release material is that the model is materially better on factuality and now approaches expert or thinking-model performance on some biology and cybersecurity tasks, but that its power makes a safety weakness more important: under hard adversarial biological prompts, the base model’s refusal rate drops sharply before OpenAI’s classifier-based safeguards are applied.
Agentic AI Is Making Enterprise Software a Control Layer
ServiceNow president, COO and chief product officer Amit Zavery argues that agentic AI will change enterprise software, but not by letting unconstrained agents replace the platforms that run corporate workflows. In a ServiceNow-sponsored interview, Zavery says the hard problem is turning probabilistic AI into reliable action across regulated, multi-system businesses, with the context, permissions, auditability and governance that enterprises require. His case is that companies such as ServiceNow retain leverage if they make AI production-ready, while software vendors that fail to adapt remain exposed.
Replit Agent Turned AI Coding Into a $250 Million Run-Rate Business
Replit founder Amjad Masad told Sam Parr and Shaan Puri that Replit’s jump from roughly $2.5 million to $250 million in revenue run-rate was not a smooth growth curve but the result of a market-creation moment. In his account, Replit Agent turned years of stalled platform ambition into a product non-engineers could use to build, deploy and run software, producing about $1 million of ARR on its first day and changing the company’s problem from finding demand to keeping up with it.
Apple Explores Intel and Samsung for U.S. Chip Production
Mark Gurman said Apple has held early talks with Intel and Samsung about using new U.S. fabs to make future A-series and M-series processors, an exploratory move he framed as a supply-chain redundancy question rather than only a political one. Apple still relies heavily on TSMC, primarily in Taiwan, and Gurman described that geographic and supplier concentration as one of the company’s biggest risks. Across the rest of the broadcast, executives and analysts described a similar shift from exposure to execution: AI companies are giving Washington early model access for review, while enterprise adoption is being tested by security, deployment cost and proprietary data advantages.
Thoma Bravo Keeps AI Strategy Model Agnostic as Cyber Risks Accelerate
Thoma Bravo managing partner Seth Boro told Bloomberg’s Dani Burger that enterprise AI is creating parallel problems for companies: faster cyber threats and uncertain deployment economics. Boro said the firm is “model agnostic,” maintaining relationships with OpenAI, Anthropic and Google while using its cybersecurity portfolio to monitor emerging threats. He argued that enterprises will need layered defenses, tighter governance of AI agents and more specific, efficient models rather than assuming general-purpose systems fit every workflow.
Autonomous AI Hackers Are Already Beating Humans on HackerOne
Oege de Moor, founder and CEO of XBOW, argues that autonomous AI hacking has moved from assistance to real exploitation. In an AI Ascent 2026 talk, he says XBOW’s system reached the top of HackerOne using only black-box access, found a remote code execution flaw in Bing Image Search from a URL alone, and would have been three times more effective with GPT-5. His warning is that defenders have six to nine months before comparable open-weight models make the same capabilities broadly available, including to attackers.
Enterprise AI Agents Need Harnesses, Traces, and Controlled Runtimes
LangChain co-founder and CEO Harrison Chase argues that enterprise AI agents are becoming an architectural problem rather than a question of adding autonomy wherever possible. In an NVIDIA AI Podcast interview, he says systems such as Claude Code, Manus and Deep Research share a common “deep agent” pattern: an LLM in a tool-calling loop, supported by a reusable harness, workspace, subagents and planning. For enterprises, Chase says trust depends on choosing the right level of autonomy and surrounding agents with observability, evaluation, secure runtimes and continued iteration.