Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

NIST has published no AI agent authorization standard, and nothing in its February 2026 draft gives an auditor a control to test. What the NCCoE did publish is more useful to a CISO with an audit on the calendar: five areas of interest that read like an assessor’s question list. Together they ask which agent acted, on whose behalf, under what authority, and with what record. A Kubernetes cluster has a primitive it can point to for each area.

Databricks has become the data and AI platform of record for a large and growing share of the enterprise market. Unity Catalog gives teams unified governance over data assets, AI models, and agentic workflows, controlling what exists, who can use it, and what policies apply.

The alerts come in at 3 AM. You've been awake for a full day and into the night, and there are critical questions you have to answer: Is this our problem, or someone else’s? A routing change that went sideways or lateral movement? A misconfigured ACL or an intrusion in progress? The questions get answered as quickly as possible by disconnected dashboards and human-error-prone manual processes. Before anyone else is awake to check the work.

AWS Dogwood brings stateful authorization to AI agents. Learn how it fits with workload identity, AuthZEN, IAM, and the move away from long-lived credentials.

If you run CertKit across multiple collections, September was your month. The new home page lets you search across all of them, the new dashboard surfaces the context you need, and a read-only API pulls it all into your external tools.

Enterprise IT environments now span cloud platforms, SaaS applications, endpoints, third-party services, and AI tools, creating more opportunities for disruption, security incidents, and operational failure. IBM’s Cost of a Data Breach Report 2026 puts the global average cost of a data breach at $4.99 million, while Verizon’s 2026 Data Breach Investigations Report found that 31% of breaches started with vulnerability exploitation and 48% involved a third party.