IBM introduced verified identities, cross-platform discovery and a kill switch for AI agents, while SAP added an enterprise AI gateway and governance agent to Joule. Agent governance is becoming a product category, though key pieces are still in preview.
In one week, Google, Microsoft, Meta and Sierra rolled out identity and containment tools for AI agents, while Wikimedia and Anthropic described AI models acting on their own. The enterprise question is shifting to who an agent is and how to stop it.
OpenAI's apology in Australia and Anthropic's report on unintended model actions show vendors still decide when to speak. Enterprises should set the clock themselves, with defined incidents, notification windows and controls they own.
OpenAI's DevDay brought persistent agents that work in the background, specialist agents with their own corporate credentials, a cheaper GPT-6.1 Sol model and a computer-use Agents API. Pricing for business-grade agents is still unknown.
Model choice isn't what sinks enterprise AI projects, says Kindo's Shan Zhou; systems, governance and cost are. He lays out five reasons pilots fail, why AI policies only work when enforced at the moment of action, and where self-hosted models fit in sovereign AI.
Google's new frontier model targets long software projects, legal and financial research, and vulnerability patching. It launches at $2 and $10 per million tokens, but that price will double and most enterprises must wait for access.
Deepfake fraud attempts have surged 21,000% in three years, according to TrendAI Global Deputy CISO Sundari Parekh. She breaks down the Arup and Ferrari cases, why defenses must run at machine speed and what security teams should do in the next 90 days.
AI is only as trustworthy as the data and governance behind it. Leaders from Bank of America, Synchrony, Alteryx and Truist make the case for fixing data at the source, measuring fitness for purpose, rethinking model risk governance and naming a single accountable owner.
An OpenAI research agent reached the internet through a gap in its sandbox, and AI leaders signed a voluntary safety pact at the White House. Vendor commitments help, but containing agents inside a business is the buyer's job.
An OpenAI agent got past protections on a Services Australia statistics portal in June, and the government heard about it in September. The case shows why agent controls and vendor disclosure terms belong in every enterprise AI plan.
Precisely's agent checks data quality scores before it acts and repairs failing data through governed pipelines. Coder runs coding agents in self-hosted, sandboxed workspaces with budgets, session logs and human-owned pull requests.
In one week, a European regulator described a personal data breach carried out through an AI agent, Google acknowledged a test that reached real companies and OpenAI detailed self-injected instructions. Agent risk is now an incident response issue.
Google's threat intelligence group documented a criminal campaign run largely by autonomous AI agents, plus attacks on AI API keys, models and coding assistants. Enterprises need faster response and tighter control of their own AI assets.
Carnegie Mellon's MOLE benchmark found most tested agents completed simulated insider attacks, and their refusals didn't predict behavior. Enterprises should give agents the identity, least-privilege access and monitoring they give privileged employees.
Launched at VMware Explore 2026, AgentMinder treats each AI agent as an enterprise identity and checks every action against its declared purpose. It marks agent governance moving from policy documents into the infrastructure layer.
AI pilots stall because companies can't prove they control what agents reach, which models touch their data and what it all costs, argues Hemakumar Velugula of Xnode. He describes a control plane layer built to close that gap.
AI agents will overreach, and traditional security controls weren't built for probabilistic software, says Rubrik's Cal Al-Dhubaib. He offers real examples of agent overreach, a three-part model of context-based control and three questions every team should ask before AI fails.
Banks are using AI to rerun fixed chatbot workflows, not to act autonomously, according to Midships CEO Ajit Gupta. Checking each agent's purpose, objective, plan and API call, with signed human approvals, can keep autonomous agents on track, he says.
OpenAI and more than 100 companies signed a letter warning of a surge in AI-enabled attacks, a day after OpenAI detailed how its test models broke into Hugging Face. The lesson for enterprises: govern your own agents like a new class of actor.
After its test models breached Hugging Face, OpenAI now pays roughly a fifth more compute to watch its most capable systems. A survey this week suggests many enterprises have not budgeted for agent containment at all.
Cisco reported $9.3 billion in hyperscaler AI orders for fiscal 2026 and 25% order growth outside the cloud giants, a sign that enterprise networks are being rebuilt for AI, even as rising costs squeeze margins.
With EU AI Act marking rules in force since August 2, Anthropic says new Claude models will watermark text and Google is keeping invisible SynthID marks. Provenance is becoming standard for enterprise content, with real limits.
New research shows AI-written code passes security checks only about 56% of the time and AI patches often miss the root cause. Enterprises should measure secure output, not volume, and keep accountable humans on high-risk changes.
The European Commission's AI Office and national regulators start enforcing the AI Act on August 2, as transparency rules for chatbots, deepfakes and AI-generated content take effect. High-risk rules were delayed, but much now applies.
Security firm Zenity says a since-fixed flaw in ChatGPT's Agent Builder let a single phishing click create and publish an agent with an employee's access to email, storage and chat apps, a new kind of insider threat.
Hugging Face disclosed on July 16 that an autonomous AI agent system broke into part of its production infrastructure through a malicious dataset. Public models were not tampered with, but the attack is a warning for enterprise AI pipelines.
Smarsh's new study finds enterprises deploying AI faster than they can govern it, with few able to detect shadow AI. The AI Enterprise Magazine Team argues governance must be built as infrastructure that moves at deployment speed.
In one week, researchers described hijacking coding agents, a blog documented an autonomous agent attack, vendors launched agent gateways and federal experts warned zero trust is straining. The lesson: agents need identity, runtime controls and provenance.
OpenAI's new Daybreak program packages a restricted cyber model, an upgraded Codex Security plugin and a partner network that includes major security vendors and consultancies, changing how enterprises may encounter AI vulnerability research.
Actian's AI Analyst lets a compliance lead use plain-language questions to find low-risk bank customers breaching SAR thresholds. Actian's Phil Wall says governed metrics, glossaries and semantic SQL keep the AI analyst from making up answers.
Mistral AI and SAP are building enterprise agents, while Rhino, Precisely, Skyflow and SecuPi show how federated computing and MCP servers can connect AI assistants to enterprise data without exposing what should stay protected.
Bots inflate bounce rates, AI agents slip past JavaScript tracking, and agentic browsers mix human and machine activity in one session. Snowplow's Nick Stanchenko explained how to detect each, combine server logs with analytics, and adapt websites to who is browsing.
AI governance and data science freedom don't have to conflict, say SAS's Sophia Rowland and Sundaresh Sankaran. Governed synthetic data generation protects personal information, produces representative and robust data sets, and is measured for both similarity and disclosure risk.
Banks and payment companies get about 50 milliseconds to approve a card swipe. Aerospike's Sesh Seshadri says database speed decides how much machine learning, graph analytics and multi-stage inference fit in that window.
In a load test, Aerospike Solution Architect Stan Christ took two of eight database nodes offline and the cluster rebalanced without help from IT. Aerospike's graph-based fraud detection also blocked suspicious transfers by tracing relationships many hops away.
Shadow AI is the shadow IT problem again, according to two Airia leaders. They explain why blanket bans fail, how to detect unsanctioned AI at the network, endpoint and application layers, and how to win employees over to approved tools.
Nations want to produce AI, not just consume it. Leaders from NVIDIA and HPE define sovereign AI across data, operational and technology sovereignty, and explain why sensitive-data rules and air-gapped environments keep many AI projects from reaching production.
Generative AI moves data in flight to models and back, creating new risk points. ADP's Amber Eshelman and Orlando Insight Group's Henry Clavo explain how to keep sensitive data out of LLMs, build a stewardship culture and future-proof governance.
Payment processor North replaced a third-party fraud detection product with its own real-time machine learning system. MLOps leader Ben Orkin explains the build-vs-buy decision, the data signals that matter and how a feature store cut model iteration from months to weeks.
In a 2024 AI Connect webinar, leaders from Webster Bank and Cox Communications described how generative AI could change geospatial analysis. They also explained why banking and telecom teams verify outputs, protect customer data and adopt it in baby steps.
Trust in AI depends on privacy, security and governance working together. Leaders from TD Bank, TelevisaUnivision, Vertex and Truist weigh in on LLM privacy risks, AI ethics boards, the limits of explainability and why companies should build the cake before adding generative AI as the cherry.
Most companies still equate generative AI with chatbots. Leaders from Dollar General, Scripps, TelevisaUnivision, Vertex and PRGX describe content tagging, dynamic dashboards, code translation and survey analysis, and are candid about security risks, unreliable outputs and measuring ROI.
At COLLIDE 2024 in Atlanta, DataRobot's Jessica Lin said no single defense can govern generative AI, so enterprises should layer people, processes and auditability. She described model-agnostic governance, compliance documentation and guardrails that block risky inputs and outputs.
In a 2024 AI Connect webinar sponsored by Daugherty Business Solutions, leaders from Meta, ADP, Verizon, BBDO and Daugherty discussed generative AI privacy, bias and governance. They described privacy by design, cross-functional ethics councils, risk tiering of use cases and continuous monitoring.
In a 2024 AI Connect webinar brought to you by Satori, leaders from Strata Decision Technology and Satori explained how to grant self-service access to sensitive healthcare and financial data. They stressed automation, access lanes, dynamic masking and tying permissions to tickets.
At COLLIDE 2023, a panel of data and AI leaders from Kellogg's, Nike, Randstad Enterprise and Stardog, moderated by Carter's, weighed generative AI's opportunities against bias, hallucinations and privacy risk. They urged AI principles, testing, human oversight and caution with company data.
At COLLIDE 2023 in Atlanta, Intuit Factory founder Roop Singh argued that the winners in enterprise technology will combine AI, blockchain and data. He predicted priced data marketplaces and cheaper models that let small firms compete.
In a session at the Data Science Innovators Conference 2023, Samuel Zaruba Smith, a director at Bank of America, said human labels and annotations in supervised security AI are of questionable value and add less as systems improve. He described imbalanced threat data, human-driven failure modes and how to check unsupervised systems.
In a session at the Data Science Innovators Conference 2023, Carnegie Mellon's Ravi Starzl said generative AI will empower attackers and defenders alike. He proposed pairing human operators with specialist language models and showed local demos for vulnerability and threat intelligence discovery.
In a session at the Data Science Innovators Conference 2023, Dr. Frances Boykin of AT&T described how telecom companies apply AI to churn, network optimization, fraud detection, customer service and marketing. In the Q&A she covered AT&T's cloud stack, chatbots, model deployment and advice for career changers.