AI Agent Governance: A Practical Guide for Enterprise Teams
Learn how to govern AI agents in production. This guide covers risks, controls, policies, and runtime enforcement for security and platform teams in 2026.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
2,172 matching stories — announcement, in AI / LLM Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Cranium AI and Weights & Biases Partner to Make AI Safety and Security a Standard Part of Model Development
Cranium AI announced a strategic integration with Weights & Biases by CoreWeave, making AI safety and security evaluations a native step in the model lifecycle. The partnership gives enterprises a single source of truth for safety evaluations and regulatory compliance.
GitHub Supply Chain Breach: Nx Console 18.95.0 (Analysis)
Nx Console v18.95.0 on OpenVSX auto-executed code from a pinned nrwl/nx commit on activation. Source-verified analysis of the Shai-Hulud VSIX.
What Is Agent Runtime Security? Why Guardrails Alone Are Not Enough
Agent runtime security protects AI agents during execution. Learn why guardrails alone are not enough and what a secure runtime for AI must include.
Human-in-the-Loop Approvals for AI Agents: When and How to Use Them
Learn when to require human-in-the-loop approvals for AI agents, how to wire them into tool-level policy, and how to capture them as audit-grade evidence.
New Model Risk Management Rules and the Effect on Your Risk and Compliance Program
The 2026 interagency model risk guidance raises the bar for banking compliance. Learn what changed, who it affects, and how to close the gaps in your model governance program — including vendor models and AI.
Cranium + Aiceberg
The post Cranium + Aiceberg appeared first on Aiceberg.
Cranium AI and ISTARI Forge Global Alliance to Drive Enterprise AI Security and Governance
Cranium AI and ISTARI announced a strategic partnership combining Cranium's AI security and governance platform with ISTARI's global cyber-resilience advisory expertise to provide enterprises with an end-to-end AI risk management and compliance framework.
Agent Action Receipts: Signed Evidence for What an AI Agent Did
Most agent security tools tell you what the agent did from inside the agent. An action receipt tells you what the agent did from outside, signs the record with a key the agent cannot reach, and lets any third party verify the record without trusting a vendor dashboard. That is the difference between a log and evidence. Verifiable AI agent actions Verifiable AI agent actions need more than a timestamped log line. They need a record from outside the agent process and a verifier that rejects tamper
Verify a Pipelock Receipt: Copy-Paste Demo
Pipelock writes a signed receipt every time it adjudicates an outbound agent action. Receipts compose into a hash-chained file an auditor or CI runner can read without trusting any vendor dashboard. This page is the shortest path from zero to “I ran the verifier, it passed, I tampered one byte, it failed.” The fixtures here come from the public conformance corpus that verifier authors and Audit Packet producers can test against. There is no vendor-only verification path: every comman
Adversarial Testing vs Red Teaming vs Pentesting (AI)
AI adversarial testing, red teaming, and pentesting are three different activities your CISO keeps conflating. Here is what each one actually means.
--dangerously-skip-permissions: A 5-Minute Triage Runbook
Claude Code dangerously-skip-permissions triage runbook: detect the flag across your fleet, audit what already ran, lock it down alongside auto mode.
Agentic Threat Intelligence Feed - VS Code Extensions
Knostic's free agentic threat intel: 4 source-validated VS Code extension findings (May 13–20, 2026), including BCAI Rosetta with 13,480 installs on Cursor.
The GitHub Breach and VS Code Extensions: Threat Intelligence and Agentic Defense
The GitHub TeamPCP incident wasn't a one-off. It's the predictable result of an unmonitored developer agent surface. Here's what CISOs should do next.
Sentinels League 2026: Live Rankings for the Threat Hunting World Championship
Sentinels League 2026 brings global threat hunters together to battle across AI, Endpoint, Cloud, and SIEM surfaces for $100K in prizes and more.
What’s New in WebOrion Monitor: Smarter Triage, Clearer Baselines, Better Filters
Monitoring works best when it stays out of your way — surfacing the things that matter and quietly handling the things that don’t. This month’s WebOrion Monitor release leans into exactly that. We’ve shipped three updates focused on cutting noise, improving visibility, and helping you investigate faster. Here’s everything that’s new. Finetuning Suggestions for AI […] The post What’s New in WebOrion Monitor: Smarter Triage, Clearer Baselines, Better Filters app
Turn Blind Trust into Verified Control with Prompt Security for Agentic AI
Prompt for Agentic AI Security empowers organizations with proactive governance, meaning security teams can deploy agents with confidence.
Is Your AI Spend Producing Anything? A Manager's Guide
Your AI budget doubled. Someone is going to ask you whether it's producing anything. Most managers don't have a great answer. Here are the two levers you actually have, and a three-question Monday-morning diagnostic.
AI Cost Attribution: Stop Asking People to Tag AI Spend
AI cost attribution fails when tagging is optional. Require four labels at key issuance: owner, team, agent, and workload. Showback and chargeback follow.
Mission Drift: Why AI Agents Fail at Step 100
Description: AI agents do not always fail with a crash. They drift. Learn why Step 1 testing and passive observability cannot stop Mission Drift, and how Highflame Compass provides runtime enforcement to keep autonomous agents aligned through Step 100.
Claude Managed Agents on Daytona
SHub Reaper | macOS Stealer Spoofs Apple, Google, and Microsoft in a Single Attack Chain
SHub Reaper bypasses Apple's Terminal mitigation, steals credentials and documents, and plants a persistent backdoor for continued access after infection.
7 Dangerous Myths About GenAI Governance That Are Exposing Your Enterprise Right Now
At a Glance There is a version of AI governance that satisfies every internal checkpoint.  The framework is mapped. The risk register is current. The compliance dashboard is green. The audit committee received the briefing. Leadership is comfortable.  And none of it will protect the organisation when a regulator walks in, points at a live […]
What Your Board Gets Wrong About AI Security
Editor's note: This article was originally published by Craig Riddell on LinkedIn. It has been republished here with the author's permission. Boards are giving AI security more airtime than ever. What they're not giving is the right framing. A year or two ago, AI was mostly a question of experimentation risk. Today, it's tied directly [...] The post What Your Board Gets Wrong About AI Security appeared first on Wallarm.
Continue.dev MCP Security: Scanning with Pipelock
Continue.dev is an open-source AI coding assistant that runs inside VS Code and JetBrains IDEs. It is MCP-native: tools, context providers, and integrations get loaded from MCP servers declared in the Continue config. Pipelock wraps each of those servers so every tool call and response runs through its MCP proxy. Why Continue.dev needs an agent firewall Continue sessions frequently involve: Workflow What Continue accesses What could go wrong Multi-file edits Source code, secrets in history Crede
Java SDK
The Human Firewall: Why AI Literacy Is Your Best Defense Against Shadow AI
The human firewall is the workforce judgment layer that helps prevent risky AI use before it becomes a data, compliance, or trust issue. In AI governance, it means employees understand what AI tools do, what information they should not share, when outputs need review, which use cases create higher risk, and how to raise concerns before a shortcut becomes an incident.
Resize Sandboxes
Excessive Token Usage: What Happens When AI Agents Enter Recursive Loops
Excessive Token Usage: What Happens When AI Agents Enter Recursive Loops You have already made the case internally for agentic AI. The productivity gains are real, the use cases are compelling, and deployment is either underway or imminent. So this is not a post to convince you that agents are worth the investment. You know […] The post Excessive Token Usage: What Happens When AI Agents Enter Recursive Loops appeared first on Portal26.
“AI has to start with governance”: A conversation with Rick Scot, Global CIO & CISO at Elevate Textiles
The Agentic Edge is a new Tenet Security interview series where we sit down with security leaders to hear what they're actually seeing, building, and worrying about as AI agents move into production. We're kicking off with Rick Scot, Global CIO and Global CISO at Elevate Textiles
Extending Security to MCP Servers: Closing a Critical Gap
The Model Context Protocol (MCP) is a de facto standard for providing structured access to privileged systems for AI agents and external integrations. It acts as a USB-C port for AI, enabling faster innovation by allowing organizations to expose tools, resources, and workflows without the time-consuming work of building APIs. Adoption has surged in recent [...] The post Extending Security to MCP Servers: Closing a Critical Gap appeared first on Wallarm.
CloudsineAI Wins Multi-Million Dollar Contract to Secure 100 GenAI Applications for Public Sector
Singapore — 11 May 2026 — CloudsineAI has been awarded a multi-million-dollar contract to secure up to 100 generative AI applications for a public-sector customer in Asia — one of the largest GenAI security deployments in the region to date. Under the contract, CloudsineAI will deploy its GenAI Security Platform to protect public-facing GenAI and […] The post CloudsineAI Wins Multi-Million Dollar Contract to Secure 100 GenAI Applications for Public Sector appeared first on cloudsineAI.
The Room Where It Happens
On placement, context, and the difference between watching an agent and trusting one. Why real trust decisions can only be made in the room.
AI Across the SDLC: The New Role of Developers in 2026 - Backslash
AI agents now run the SDLC, from planning to AppSec to orchestration. Developers move up to architecture, validation, security, and AI workflow oversight.
One Prompt, One Unauthenticated Shell on Your Laptop, Open to the Internet
Series · Agent Control Plane: AI Real Risks · Part 3 of ∞
What Privacy-Preserving Compute Means for AI Data Compliance
Breaking Data Silos: How Private Inference Unlocks GPU ROI on Sensitive Data
Private inference architecture, powered by Protopia AI’s Stained Glass, directly strengthens multiple ARMOR domains. The post Breaking Data Silos: How Private Inference Unlocks GPU ROI on Sensitive Data appeared first on Protopia.
AI Governance and Data Privacy: How to Close the Gap Between Policy and Practice
Most organizations have solid AI governance policies on paper. The problem is that paper and practice have never been further apart, and closing that gap has become the most pressing risk management challenge for compliance leaders today.
Comment and Control: How One Prompt Injection Hit Claude Code, Gemini CLI, and Copilot Agent
Comment and Control: a single prompt-injection class hits Claude Code, Gemini CLI, and Copilot Agent via PR titles, fake trust markers, and HTML comments. The teardown.