Workflow Automation in 2026: n8n Published 196 Advisories in Nine Months, 59,558 Hosts Sat Exposed, and the Code Alternative Raised at $12.55B
The no-code automation tools became agent runtimes this year and the security record followed: n8n went from a EUR 250M valuation to a reported $5.2B while publishing 196 GitHub security advisories in 2026 (19 critical), a CVSS 10.0 unauthenticated flaw left 59,558 hosts exposed per Shadowserver, and CISA added one n8n and six Langflow CVEs to its exploited list. Zapier MCP counts 25 million tool calls, Copilot Studio bills 5 credits per agent action, Agentforce ARR passed $1.5B, and Temporal raised $550M at $12.55B with 4,300 paying customers. Plus a hardened n8n queue-mode compose file.
15 minOct 5, 2026Policy as Code for AI Agents in 2026: Cedar at the Gateway, Rego in the Hook, and the 11.2% the Model Still Lets Through
What actually enforces limits on AI agents in 2026: OPA 1.21 and Rego v1 after the founders moved to Apple, Cedar in Amazon Bedrock AgentCore Policy (GA 3 March 2026, 13 regions, default deny), Kyverno 1.19 retiring ClusterPolicy for CEL, Claude Code hooks that deny even in bypass mode, Codex's Seatbelt and bwrap sandboxes, the MCP 2026-07-28 authorization spec, and why none of it is optional while browser-agent injection success sits at 11.2% and OpenAI says the problem is unlikely to ever be fully solved. With a tested Rego policy and a Cedar policy for tool calls.
13 minOct 5, 2026CRA Reporting Went Live on 11 September: 24 Hours to ENISA, 3.08 Billion Rekor Entries, 17% of PyPI Attested, 92% SBOM False Positives
Supply-chain compliance in 2026: what the Cyber Resilience Act's Article 14 duty requires since 11 September 2026 (24-hour early warning, 72-hour notification, ENISA's Single Reporting Platform), what waits until 11 December 2027, how the open-source steward role works, where SBOMs stand (CISA's 2026 minimum elements, CycloneDX 1.7, a 92 percent false-positive rate in a 2,414-repo study), how far provenance has got (SLSA 1.2, 20 percent of PyPI uploads via trusted publishing, Rekor at 3.08 billion entries), the US retreat from mandates, and the pipeline I would run.
13 minOct 5, 2026CI/CD in 2026: Agents Opened 1M PRs in 5 Months, Bots Write 1 in 5 Reviews, and Most Agent PRs Get No Human Look
What the pipeline looks like when AI agents open the pull requests: GitHub's coding agent went GA on 25 September 2025 and opened over a million PRs in five months, Copilot code review passed 60 million reviews and one in five on GitHub, CodeRabbit has reviewed 13 million PRs on $88 million raised, and the first studies find most agent PRs get no human review attention. The gates that still hold: the assigner cannot approve, an extra approval for bot authors, path fences, signed commits, SLSA provenance, and a workflow YAML that gives agent PRs their own lane.
13 minOct 5, 2026Browser Agents in 2026: 90.2% on OSWorld-Verified, 20.6% on OSWorld 2.0, and Three Agent Browsers Already Shut Down
Computer-use agents passed the 72.36 percent human baseline on OSWorld-Verified this year (90.2 percent for the top framework, 86.0 for Claude Fable 5), then scored 20.6 percent on the 108-task OSWorld 2.0 that replaced it; Operator, Project Mariner and ChatGPT Atlas were all discontinued within 19 months; prompt-injection success in Anthropic's own tests fell from 23.6 to 11.2 percent and no vendor claims zero; Cloudflare sells HTTP 402 access to agents while 52 percent of crawling is for training; and hosting settled on one headless Chrome per microVM at $0.02 to $0.12 a browser-hour.
13 minOct 5, 2026AI SOC Agents in 2026: 98% Accuracy Claims, 23 to 34% on the Benchmark, and 0% of Teams Letting Them Act Alone
What the security-operations agents from Microsoft, Google, CrowdStrike, Palo Alto, SentinelOne, Torq and a billion-dollar startup cohort actually do in 2026 and what is measured: a median of 100 alerts a day and 28 percent never investigated, 75-minute mean investigations, Microsoft's $4-an-hour compute units and Google's token meter, CrowdStrike's 98 percent triage claim against Meta's 23 to 34 percent benchmark, Anthropic's and Google's reports of attackers running agents against defenders, and a Sigma rule and CI step that keep a human on the merge button.
14 minOct 5, 2026Agent Memory in 2026: Vendors Claim 92.5 on LoCoMo, a Plain Filesystem Scored 74, and Every Memory Product Lost to BM25
Agent memory systems in 2026, kept honest: Mem0's 66.9 on LoCoMo in its own paper versus 92.5 on its managed platform a year later, Zep's 75.1 rebuttal and the three bugs behind Mem0's 66.0 for Zep, Letta's 74.0 with only a filesystem, MemoryAgentBench putting every commercial system under 45 on retrieval against BM25 at 60.5, Hindsight's 89.6, first-party memory from ChatGPT, Claude and Gemini with dates, both labs' compaction APIs, what re-reading 115k tokens costs at cache-read prices, a Postgres and pgvector layer with supersession, and why memory poisoning is still unfixed.
13 minSep 9, 2026Zero-Knowledge in 2026: Ethereum Blocks Proven in 3 Seconds for a Third of a Cent, a 52-Bit Security Gap, and Google Wallet Proving Your Age
Where zero-knowledge proofs actually stand: the Ethereum Foundation's real-time proving definition and the measured numbers on ethproofs (from 16 minutes and $1.69 to 3 seconds and $0.003 a block on consumer GPUs), why the security certification is the hard part (a 52-bit gap between the proven and claimed soundness of the hash used), the zkVM bugs fuzzers found this year, the L2 landscape at $43 billion with zero Stage 2 rollups, and the non-crypto uses shipping now: Google Wallet's ZK age proofs, the EU wallet's December deadline, zkML and zkTLS. Plus a proof you can generate on a laptop.
14 minSep 9, 2026On-Device Inference in 2026: 160 Tokens a Second on a Laptop, a 2-Bit Model in Every iPhone, and the Bandwidth Arithmetic That Decides What Stays Local
What actually runs on the device now: Apple's 3B model trained at 2 bits and the WWDC26 framework that lets any model plug in, Gemini Nano inside AICore, Windows ML and the quiet replacement of Phi Silica, the NPU TOPS numbers and why they are the wrong metric, the small-model field from Gemma 4 E2B to Qwen3.5-2B to LFM2.5 with licences, measured decode speeds from Google's own tables and an independent phone benchmark, the runtimes (llama.cpp with multi-token prediction, LiteRT-LM, ExecuTorch 1.0, MLX), the memory-bandwidth arithmetic that predicts all of it, and the model-extraction attacks nobody has fixed. With commands to run one today.
14 minSep 9, 2026Agent-to-Agent Protocols in 2026: A2A Reached 1.0, Three ACPs Died or Merged, and MCP Learned to Do Most of the Same Job
What Google's Agent2Agent protocol actually specifies at v1.0, what changed when it moved into the Agentic AI Foundation in August, which vendors have shipped it versus announced it, how MCP's July 2026 revision reproduced A2A's task lifecycle almost state for state, the first real CVE on an A2A surface, what the production data says about how rare multi-hop agent systems are, and a working server and client on the 1.1 SDK with the breaking changes listed.
14 minSep 8, 2026Open Weights in 2026: Chinese Labs Ship the Frontier, the Licenses Grew Clauses, and Brussels Started Enforcing
DeepSeek V4, Kimi K3, GLM-5.3, Qwen3.8 and Xiaomi's MiMo are the open frontier now; Meta went closed and came back; the licences quietly acquired revenue thresholds; the EU AI Office got its enforcement powers on 2 August. What I found when I read every licence file, with the Hugging Face API calls that check them.
16 minSep 8, 2026Confidential Computing for AI in 2026: Apple Moved to Google's TEEs, a $1,000 Interposer Broke the Keys, and Firecracker Still Can't Do It
What a hardware enclave actually promises for an AI workload, what it costs (4 to 28% depending on what you measure), what broke it this year (TEE.fail, Battering RAM, WireTap), who runs inference in one (Apple, Google, Meta, a dozen startups) and who doesn't say (OpenAI, Anthropic). Plus the state of SEV-SNP, TDX and Arm CCA in the kernel, why my microVM platform cannot offer it yet, and the commands to verify an attestation yourself.
15 minSep 8, 2026AI Found the Bugs: 23,000 Findings in a Month, a 3-Day Patch Mandate, and the End of curl's Bounty
From AIxCC's 18 real bugs in August 2025 to Project Glasswing's 23,019 findings by May 2026 and the first AI-written zero-day exploited in the wild. What the cyber reasoning systems, Big Sleep, Codex Security and Mythos Preview actually did, why bug bounties are drowning, why CISA now wants federal patches in three days, and a workflow for a small team that keeps the humans looking only at validated findings.
13 minSep 7, 2026Who Is This Agent? Non-Human Identity in 2026, From the RFCs to the Breaches
Machines outnumber humans 109 to 1 in the enterprise directory, the OAuth working group has 70 drafts in flight, MCP just deprecated dynamic registration, and an agent with an over-scoped token deleted a production database in nine seconds. What actually standardised this year, what shipped, and the delegation chain I would build.
16 minSep 6, 2026Post-Quantum Migration in 2026: What's Done, What's Stuck, and What to Do This Quarter
Two-thirds of browser traffic to Cloudflare is already post-quantum. Your SSH is too. Your certificates are not, and won't be until 2027. A field guide for infrastructure engineers, with verified commands and hard deadlines.
13 min