Posts

RSA Conference opened its doors in San Francisco on March 23, 2026, and the message was impossible to miss before the first keynote even ended: agentic AI security is now the primary concern of the entire enterprise security industry. For years, RSAC has been the place where the security industry takes collective stock of where threats are heading. This year, every major vendor arrived with the same answer: AI agents are the new attack surface, and the industry is barely ready for it. ...

There’s a wall every engineering team hits when they try to move AI agents from demo to production: identity and access management. An agent needs credentials to do anything useful — database access, API keys, infrastructure permissions. But credentials that live inside an agent are credentials that can be leaked, stolen, or misused. Traditional IAM wasn’t designed for ephemeral, autonomous software actors. And so most production agent deployments end up making one of two bad choices: over-permissioned agents with broad access they don’t need, or under-permissioned agents so locked down they can’t do their jobs. ...

OpenClaw went viral for a reason — it’s the closest thing to a real personal AI operating system most developers have ever touched. But as Cisco’s own engineers put it at RSA Conference 2026 this week: the fastest-growing open source project in history is also a massive target. Their answer is DefenseClaw, an open-source security framework built specifically for OpenClaw deployments. What DefenseClaw Actually Does Cisco unveiled DefenseClaw on Monday at RSAC 2026, the San Francisco security conference that this year has turned almost entirely toward AI agent security. The framework ships with six distinct components designed to close the security gap that’s opened up as OpenClaw adoption has exploded: ...

The Wall Street Journal confirmed it Sunday: Mark Zuckerberg is building a personal AI agent to help him run Meta. It’s already in active use. And it’s doing something that would have been unthinkable for a Fortune 500 CEO just 18 months ago — replacing human intermediaries entirely. What the Agent Actually Does According to the WSJ report, Zuckerberg’s personal agent functions as an intelligence aggregator. Instead of going through multiple layers of people or teams to get answers — the classic CEO bottleneck where questions cascade through VPs, directors, and managers before a response bubbles back up — the agent retrieves information directly. ...

Ask any platform engineer why their team hasn’t shipped AI agents to production yet, and you’ll get a version of the same answer: identity, access control, and audit trails. The problems aren’t exotic — they’re the same IAM challenges that have governed every production system for the past two decades. But the agent runtime has made them acutely worse. Teleport’s answer is Beams, announced at KubeCon CloudNativeCon Europe 2026 and launching as an MVP on April 30. ...

If you’ve tried to build a serious AI agent in 2025 or 2026, you’ve almost certainly hit the same wall: you pick a framework, go deep, and then discover you’re locked in. Want to move from LangChain to AutoGen? That’s not a refactor — that’s a rewrite. Choose Claude Code as your execution environment? Great, until you need to run the same agent in an OpenAI Assistants context. GitAgent is the project that calls this problem by its name and offers a structural solution: a framework-agnostic, git-native specification that lets you define an agent once and deploy it across any of the major orchestration layers without touching your core logic. ...

Here’s a number worth sitting with: in any given business function at any given company, fewer than 10% of respondents say their organization is actually scaling AI agents. That’s the finding from McKinsey’s latest “Week in Charts” dataset — one of the more reliable pulse-checks on enterprise technology adoption because it pulls from real organizational survey data rather than vendor-funded enthusiasm. The conclusion is stark: the gap between the AI agent hype cycle and the ground truth of enterprise deployment is enormous. ...

Tencent has pulled off one of the most significant AI agent distribution moves in recent memory: ClawBot, launched Sunday, places the full OpenClaw AI agent experience directly inside WeChat — a messaging platform used by more than 1 billion people every month. That’s not a niche developer tool. That’s putting autonomous AI agents in the pocket of a quarter of the world’s population, accessible through the same app they use to pay for groceries, chat with family, and run their businesses. ...

As AI agents move from pilot projects into enterprise-wide deployment, one question is keeping CIOs and risk officers up at night: what happens when an agent does something it wasn’t supposed to? KPMG has an answer — or at least, the most detailed public framework for one yet. In a conversation with Business Insider, Sam Gloede, KPMG’s Trusted AI leader, walked through the firm’s multifaceted approach to keeping agents within bounds. The framework covers technical controls, monitoring infrastructure, human oversight, and yes — kill switches. But Gloede is clear that the switch is a last resort, not a solution. ...

OpenClaw’s rise in China has taken a new turn: what started as a viral cultural phenomenon has crossed into serious enterprise territory — and that’s prompted China’s government to respond with back-to-back cybersecurity warnings unlike anything it has issued about a single open-source project before. The dual nature of this story — explosive adoption and urgent official concern — captures exactly the tension that agentic AI creates at scale. The Adoption Wave The numbers from China’s tech sector are striking. Tencent Cloud is running on-site installation sessions for enterprise clients, helping businesses deploy OpenClaw at scale. Alibaba has launched a dedicated OpenClaw application — not just compatibility, but a purpose-built product built on the framework. ...