Posts

The Model Context Protocol just got officially reviewed by the U.S. intelligence community — and the findings are worth reading if you’re building or deploying MCP-connected agents. On May 20, 2026, the NSA’s Artificial Intelligence Security Center (AISC) published a Cybersecurity Information Sheet (CSI) titled “Model Context Protocol (MCP): Security Design Considerations for AI-Driven Automation.” It’s the first major government-level security guidance specifically targeting MCP — the protocol that has rapidly become the default way AI agents connect to tools, APIs, and data sources. ...

This is the latest in subagentic.ai’s ongoing coverage of the DoD-Anthropic fallout. Earlier reporting covered the February 28 supply-chain risk discussion, the March 4 contractor concerns, and the March 5 formal designation. This piece covers what’s happening now: active testing of replacement models. The Pentagon has moved from designating Anthropic a supply-chain risk to actively testing the models it wants to replace Claude with. According to reporting from Bloomberg (May 21, 2026), corroborated by DefenseOne and CryptoBriefing, the Department of Defense is running structured evaluations of OpenAI (ChatGPT), Google (Gemini), and xAI (Grok) on its GenAI.mil enterprise platform. ...

WordPress just crossed a milestone that mainstream developers have been watching for years: native AI agent infrastructure, baked directly into core. WordPress 7.0 “Armstrong” — named for jazz legend Louis Armstrong, released May 20, 2026 — is not another AI plugin. It’s a foundational shift. And it came with an immediate security warning. What WordPress 7.0 Actually Ships The headline AI features in WordPress 7.0 are three interlocking systems designed to make AI capabilities a first-class part of WordPress site development: ...

When Anthropic agreed to a $5 billion investment from Microsoft, observers expected closer hardware collaboration would follow. It appears that moment is arriving sooner than expected. According to reporting from CNBC, Reuters, and The Information, Anthropic and Microsoft are in early-stage discussions about using Microsoft’s custom Maia 200 AI chip to power Claude inference workloads. This is still a nascent conversation — no deal has been signed, and these talks remain preliminary. But even at this stage, the conversations reveal a great deal about where enterprise AI infrastructure is heading in 2026. ...

Most of Anthropic’s senior leadership crossed the Atlantic this week for a series of events across the United Kingdom — including Code with Claude London, the company’s first dedicated developer gathering in Europe. Fortune’s Eye on AI captured the moment: Boris Cherny, Claude Code’s creator and head, front and center at a company making a very deliberate statement about its European ambitions. The timing is significant. Claude Code — Anthropic’s terminal-based agentic coding environment — has crossed from developer curiosity into something that looks very much like mainstream enterprise tooling. And with that mainstreaming comes a new wave of complexity: technical, organizational, and deeply human. ...

At Google I/O 2026 on May 19th, Google announced something it calls Information Agents — and buried in the enthusiasm of a developer keynote was a feature that deserves much more critical scrutiny than it’s received. The concept sounds useful on its surface: persistent AI agents, powered by Gemini 3.5 Flash, that continuously monitor the web on user-defined topics, 24 hours a day, seven days a week. You set your interests, and the agent quietly watches for relevant developments, summarizing and surfacing them for you on demand. ...

Zscaler Acquires Symmetry Systems to Lock Down AI Agent Identity — First M&A Deal Targeting Agentic Security The security industry just sent its clearest signal yet that AI agents aren’t a future concern — they’re a present one. On May 21, 2026, Zscaler announced its intent to acquire Symmetry Systems, a company that built exactly the kind of identity graph technology needed to see and control what AI agents are doing inside enterprise environments. ...

Eight days ago, Nebula Security’s AI agent Vega made headlines by discovering nginx-rift (CVE-2026-42945) — an unauthenticated remote code execution vulnerability in nginx 1.31.0 that sent administrators scrambling to patch. The nginx team released a fix. Teams updated. Incident closed. Except Vega kept digging. On May 21, Nebula Security disclosed nginx-poolslip — a second, distinct RCE vulnerability in nginx 1.31.0 that specifically bypasses the nginx-rift patch. There is currently no CVE assigned and no available fix. ...

When SpaceX quietly filed its S-1 IPO registration with the SEC this week, it handed the world a detailed financial X-ray of one of the most consequential private deals in AI infrastructure history. Buried inside: Anthropic agreed to pay SpaceX $1.25 billion per month for access to its Colossus data centers in Memphis, Tennessee — a commitment running through May 2029, totaling nearly $45 billion over three years. That number is staggering. For context: SpaceX reported $18.7 billion in total revenue for all of 2025. Anthropic’s monthly payment to Elon Musk’s company alone approaches what the rocket company earned in an entire quarter last year. ...

Design tooling had a genuinely remarkable 24 hours on May 20, 2026. Figma launched its native AI Design Agent into open beta. Google, at I/O 2026, unveiled Stitch — a streaming AI design agent with real-time multiplayer editing. Both tools dropped on the same day. And Google Stitch is free, while Figma’s full rollout will cost $15 per seat for Professional and above plans. The design agent wars are officially on. ...