A weekly, opinionated digest of what actually mattered in cloud, security, AI, and automation — with a practitioner's read on each.
An unauthenticated file-write in FortiMail lands on CISA's KEV list, and GitLab's AI Gateway gets a 9.9 RCE. Plus Amazon EKS moves to Kubernetes 1.37, AWS publishes its agentic migration playbook, and Terraform 1.16 pulls imports into child modules.
A CVSS 10.0 authentication bypass in Cisco ISE — the box that decides who gets on your network — exploited before the advisory shipped. Plus AWS rebuilds the AgentCore Runtime and cuts cold starts by an order of magnitude, HashiCorp ships CIS and PCI DSS policy sets natively, and Azure quietly tightens SAS tokens to Entra ID identities.
CISA's seven-CVE KEV batch is really one story: the AI stack is now the target. A CVSS 10.0 SSRF in SonicWall SMA appliances, an auth bypass in LiteLLM's MCP endpoint being used to harvest provider keys, a workflow orchestrator turned into a crypto miner, and AWS quietly shipping the governance plumbing for agent fleets.
A two-month-old NetScaler patch turns into a KEV entry after researchers prove the crash was really a heap overflow, Google Cloud ships Agent Identity to GA and gives agents SPIFFE-backed credentials, the numbers say agent adoption is now blocked on governance rather than model quality, and GitHub starts brownouts on outdated self-hosted runners.
Cisco ships an emergency fix for an actively exploited ASA/FTD VPN flaw with a three-day federal deadline, AWS makes Transform continuous modernization GA and reframes migration as an ongoing process, AWS open-sources Dogwood to put temporal policy around agent actions, and Agent Plugins lands as a vendor-neutral packaging spec for agent extensions.
An actively exploited N-able N-central bypass lands in CISA's KEV after real customer compromises, Pulumi Cloud becomes a Terraform state backend and ships HCL as a first-class language, Google's Managed Airflow moves to Airflow 3.2.2 while 2.10.5 starts sunsetting, and Kognitos wires finance rules directly into governed AI agents.
A public PoC turns an AD CS enrollment quirk into full domain takeover, JetBrains ships an emergency fix for an unauthenticated RCE in TeamCity's CI/CD server, Google Cloud flips Looker MFA on by default, and Cognizant stands up an EMEA unit aimed squarely at the 88% agent-pilot failure rate.
A fourth SharePoint RCE (CVE-2026-50522) goes from public PoC to machine-key theft in hours, AWS quietly removes two long-standing migration frictions in S3 and Cognito, OpenAI's GPT-5.6 family lands GA on Bedrock behind the Responses API, and AWS starts shipping agent-native tooling straight into the build-and-deploy loop.
Microsoft ships a record 569-CVE Patch Tuesday with SharePoint and AD FS zero-days under active attack, AWS Summit NYC turns cross-cloud management into a first-party feature by folding Azure into Security Hub and Systems Manager, GitHub enforces immutable OIDC subject claims while backporting a secure-by-default fix for pwn requests, and the 2026 State of AI Agents numbers land hard — 96% running agents, 12% able to govern them.
Adobe ColdFusion's CVSS 10.0 RCE (CVE-2026-48282) hits the wild two hours post-disclosure, Microsoft's Defender flaw grants SYSTEM privileges via RoguePlanet, Patch Tuesday swells to 220+ critical flaws across Windows, AWS hardens security automation with AI-native vulnerability discovery and OAuth-gated MCP access, and enterprise AI agents hit the governance wall with 88% of orgs reporting incidents despite production adoption at 72%.
CISA puts SharePoint and Splunk on emergency-patch clocks while a CVSS 10.0 SimpleHelp auth bypass gets exploited in the wild, AWS goes all-in on public-sector AI at its D.C. Summit, Gartner sizes agent software at $206.5B against an 88% incident rate, and the npm worm era keeps validating GitHub's pipeline-hardening roadmap.
A Check Point VPN zero-day that ransomware crews were riding a month before the patch, Google making cross-cloud location data a first-class API, the agentic-AI buying cycle hitting its governance wall, and Terraform and OpenTofu both shipping point releases in the same week. The week's signal, with a practitioner's read on each.
A PeopleSoft zero-day that gutted higher ed before Oracle even shipped an advisory, AWS turning incident response into an autonomous agent, Pulumi planting a flag on Terraform's own turf, and JPMorgan moving AI spend into the same budget line as data centers. The week's signal, with a practitioner's read on each.
A Check Point VPN zero-day already in ransomware hands, the cloud providers quietly attacking egress fees, KPMG putting agents into production with guardrails, and OpenTofu dropping the DynamoDB lock table. The week's signal, with a practitioner's read on each.