Search: “ecosystem”

13 stories in the last 24h

A measurement study of 179 remote MCP servers finds heavy infrastructure concentration (HHI 0.736) and a security-observability tradeoff in platform OAuth.

The paper introduces a three-tier observability framework (catalog metadata, passive compliance signals, live vulnerability analysis) applied to a stratified sample of 179 remote Model Context Protocol (MCP) endpoints from two public registries. The Herfindahl-Hirschman Index over ASN distribution is 0.736, well above the 0.25 high-concentration threshold, and 95% of commercial PaaS-hosted servers enforce gateway-level OAuth 2.1 with PKCE. Authentication correlates strongly with hosting platform choice rather than operator configuration, creating a security-observability tradeoff that constrains automated scanning for tool-poisoning vectors without prior credentials.

arXiv cs.CRSep 16, 17:31 UTC · 15h agoAI safety & security

Top 10 Best Google Cloud (GCP) Security Tools in 2026new

An editorial scorecard ranks the top ten Google Cloud security tools for 2026, with Wiz, Sysdig, and Security Command Center leading on correlation, GKE runtime, and native depth.

The roundup evaluates ten GCP security tools across five weighted criteria including GCP-native depth, correlation, runtime protection, multicloud parity, and value. Google Security Command Center is positioned as the included native floor, while Wiz and Sysdig top the weighted scores at 4.50, followed by Prisma Cloud at 4.40. The piece notes Forseti is deprecated and that Lacework is now Fortinet's FortiCNAPP, and flags diligence around Google's acquisition of Wiz. It is an editorial assessment, not a lab test, with pricing compared by model only.

Cyber Security News08:37 UTC · 14m agoIndustry

Top 10 Best Microsoft Azure Security Tools in 2026new

An editorial roundup of the ten best Azure security tools in 2026 names Defender for Cloud the native floor, with Wiz, Orca, and Prisma Cloud leading third-party options.

The brief reviews ten Azure security tools, positioning Microsoft Defender for Cloud's free foundational tier and published per-resource plans as the rational starting point for every Azure estate. Wiz and Orca are shortlisted for agentless attack-path correlation, Prisma Cloud for multicloud breadth, CrowdStrike for runtime protection, and Tenable for CIEM depth with Entra permission analytics. The piece emphasizes Azure's tight identity-infrastructure coupling via Entra ID as both an operational advantage and its most critical risk surface. Scoring is editorial, not lab-tested, with pricing compared by model only.

Cyber Security News08:31 UTC · 20m agoIndustry

NVIDIA Vera Rubin NVL72 Delivers Leading Performance in MLPerf Inference v6.1 Debut

NVIDIA's Vera Rubin NVL72 debuts in MLPerf Inference v6.1 with up to 3.7x higher throughput than GB300 NVL72 and 99% scaling efficiency at 288 GPUs.

In its first MLPerf Inference preview submission, NVIDIA's Vera Rubin NVL72 achieved up to 3.7x higher throughput than GB300 NVL72 on Qwen3-VL and 2.5x on DeepSeek-R1. A 288-GPU GB300 NVL72 submission across four racks reached 99% scaling efficiency on the DeepSeek-R1 offline benchmark. Software optimizations delivered up to 1.6x gains over v6.0, leveraging TensorRT-LLM, vLLM, Dynamo, disaggregated serving, and NVFP4 precision.

NVIDIA BlogSep 16, 15:00 UTC · 17h agoAI industry 2 sources

Robots are waiting for a ChatGPT moment: Nvidia’s Les Karpas explains why at TechCrunch Disrupt 2026

NVIDIA Inception's Les Karpas will discuss at TechCrunch Disrupt 2026 why robotics lacks a ChatGPT moment, citing missing internet-scale physical AI datasets.

NVIDIA Inception's Global Head of Physical AI, Les Karpas, will speak on the Real World AI Stage at TechCrunch Disrupt 2026, held October 13-15 at San Francisco's Moscone West. His core argument is that general-purpose robots lack an internet-wide dataset for physical AI, unlike language models from OpenAI and Anthropic. Founders from Shield AI, Colossal Biosciences, FieldAI, and Foxglove will join related sessions.

TechCrunch · AISep 16, 15:00 UTC · 17h agoAI industry

Top 10 Best AWS Security Tools in 2026

Editorial roundup ranking the ten best AWS security tools of 2026, from native GuardDuty and Security Hub to CNAPPs like Wiz and Prisma Cloud.

The article recommends enabling AWS-native services first: GuardDuty for threat detection, Security Hub for posture aggregation, the free IAM Access Analyzer, plus CloudTrail logging and Config rules. It then reviews third-party platforms including Wiz, Palo Alto Prisma Cloud, CrowdStrike Falcon Cloud Security, Trend Micro Cloud One, and Orca Security. It is an editorial vendor assessment with pricing described by model only, highlighting cross-account correlation and attack-path prioritization as third-party differentiators.

Cyber Security NewsSep 16, 09:57 UTC · 22h agoTools

AI is adding to the review load on open-source projects, many of them thinly funded

ACM Technology Policy Council authors warn AI-generated code is overwhelming thinly funded open-source maintainers, raising software supply chain security risks.

Six authors including Simson Garfinkel and Josiah Dykstra, writing for the ACM Technology Policy Council, argue AI coding tools flood open-source projects with contributions that human maintainers must still review. They cite Google's CodeMender agent contributing 72 security fixes to open-source projects, some as large as 4.5 million lines of code, between April and October 2025. Funding is lopsided: the Linux Foundation raised $292,217,236 in 2024 versus $2,379,402 for the Apache Software Foundation. They also note most open-source applications still ship no SBOM despite US and EU mandates, and attackers increasingly plant malicious packages in popular repositories.

Help Net Security04:30 UTC · 4h agoAI industry

Your startup’s next teammate might be an AI agent: Gusto, Insight Partners, and Leland explain what that changes at TechCrunch Disrupt 2026

TechCrunch Disrupt 2026 panel with Gusto, Insight Partners, and Leland will examine how startups integrate AI agents into early teams.

A Builders Stage session titled "Hiring When AI Is a Co-Founder" at TechCrunch Disrupt 2026 (October 13-15, Moscone West, San Francisco) features Gusto CEO Josh Reeves, Insight Partners SVP Michelle Johnson, and Leland CEO John Koelliker. The panel will discuss how early-stage startups decide which work to delegate to AI agents versus human hires, covering ownership, accountability, and culture. Gusto serves more than 500,000 companies, and Johnson previously helped scale Flock Safety from under $1 million to $90 million in ARR. The piece doubles as event promotion with discounted registration before September 25.

TechCrunch · AI03:30 UTC · 5h agoAI industry

CISA decides weekly vulnerability bulletin isn't necessary anymore

CISA will discontinue its weekly vulnerability bulletin on September 28, pushing users toward KEV, alerts, and CVE data under risk-based prioritization.

CISA announced its weekly vulnerability bulletin will stop on Monday, September 28, as part of a shift from static CVSS severity scores to a modern, risk-based approach detailed in a June Binding Operational Directive. The directive prioritizes federal remediation based on exposure, exploitation evidence, control granted by exploitation, and whether exploitation can be automated. CISA directs bulletin subscribers to rely instead on its Known Exploited Vulnerabilities catalog, cybersecurity alerts and advisories, and the CVE catalog, requiring users to enable those subscriptions in GovDelivery or Granicus to avoid missing critical notices.

The Register · SecuritySep 16, 20:33 UTC · 12h agoPolicy & legal

Google will now let any AI agent run your smart home

Google's Home MCP integration lets third-party AI agents like Claude control smart home devices and analyze home data.

Google launched Home MCP, a Model Context Protocol integration allowing third-party AI agents such as Claude, Google Antigravity, Hermes, and Open Claw to control devices and analyze event history across Google Home ecosystems. Capabilities include cross-camera analysis, device-state reasoning, voice messaging via Nest speakers, and custom dashboards, with rate limits and blocks on actions like unlocking doors. Availability starts with Google Home Premium Advanced users in the US ($20/month or $200/year) and requires setting up a Google Cloud project.

The Verge · AISep 16, 17:00 UTC · 15h agoAI industry 2 sources

Emerald AI, Google and NVIDIA Launch Alliance to Advance Flexible AI Data Centers

Emerald AI, Google, and NVIDIA launched the AI Energy Management Alliance to promote power-flexible, grid-responsive AI data centers.

Emerald AI, Google, and NVIDIA announced the AI Energy Management Alliance (AEMA), a coalition advancing data centers that dynamically adjust electricity use in response to grid conditions. The technology-neutral, performance-based alliance will standardize flexibility requirements, define ride-through and curtailment obligations, and create faster interconnection pathways for facilities making verifiable flexibility commitments. It plans to convene AI platforms, data center operators, utilities, power producers, and grid operators to support US AI infrastructure growth.

NVIDIA BlogSep 16, 13:00 UTC · 19h agoAI industry

Top 10 Best Multi-Cloud Security Platforms in 2026

An editorial roundup of the ten best multi-cloud security platforms for 2026, split between CNAPPs (Wiz, Prisma Cloud) and cloud-networking security (Aviatrix).

The article frames multi-cloud security as two markets: CNAPP platforms (Wiz, Prisma Cloud, CrowdStrike, Orca, Defender) securing what runs in clouds, and cloud-networking-security platforms (Aviatrix) securing how clouds connect. It ranks ten platforms including Palo Alto Prisma Cloud for breadth, Wiz for correlation, Check Point CloudGuard, Fortinet, Aviatrix, Microsoft Defender for Cloud, Trend Micro, and CrowdStrike. It flags the ~$32 billion Google–Wiz acquisition as raising cloud-neutrality questions buyers should address contractually.

Cyber Security NewsSep 16, 09:50 UTC · 23h agoTools

Cyberthreats are moving faster than SMBs: Readiness must accelerate

ESET's SMB Cyber Readiness Index 2026 finds 73% of SMBs adopting AI while 40% lack AI policy, and reports 3,000+ malicious AI agent skills.

ESET argues AI is accelerating cyberthreats while expanding the attack surface: its SMB Cyber Readiness Index 2026 found 73% of SMBs integrating AI and 40% of businesses lacking a proper AI policy. ESET analyzed 900,000 AI agent skills across popular repositories between March and May 2026, finding over 25,000 suspicious and more than 3,000 malicious skills that exfiltrate data, execute malware, or abuse prompt injection. The piece also cites AI-assisted reconnaissance, exploit development, and social engineering, plus PromptSpy, an Android spyware abusing Google Gemini at runtime for persistence.

ESET WeLiveSecuritySep 16, 09:00 UTC · 23h agoIndustry