Every agent is a new identity with credentials. Security is becoming the constraint on how much autonomy enterprises allow.
AI Security: Parallax Index score. Score: W1 58, W2 60, W3 63, W4 65, W5 68, W6 70, W7 72, W8 75, W9 77, W10 80, W11 82, W12 84.
A compromised release pipeline put a poisoned LiteLLM build on PyPI and Docker for under three hours on 21 October 2026. It harvested cloud secrets, AI provider API keys and SSH keys, and Wiz says the attackers were spending stolen AWS credentials about four and a half hours later.
A Federal Register notice on 20 October 2026 published a Homeland Security order excluding DeepSeek from federal civilian procurement and requiring agencies to remove DeepSeek products, and third-party software built on DeepSeek implementations, from their systems.
Ivanti disclosed CVE-2026-104935 on 13 October 2026 and CISA added it to the Known Exploited Vulnerabilities catalogue the same day. Volexity found an attacker running commands as root on a fully patched VPN gateway from 3 October.
Epic Systems, whose software holds records for 325 million patients, has paused most product development to patch security flaws surfaced by Anthropic's cybersecurity model Mythos. The company's chief security officer told the New York Times, in a report published on 30 September 2026, that certain customer configurations could let outsiders read records without the access being written to the software's logs.
Gemini 4 Argon is going first to cyber defenders admitted to Google's Fairwind Program, and that cohort receives it without cyber guardrails. Developers, enterprises and consumers come later, and Google has given no date.
Citrix patched eight NetScaler ADC and Gateway flaws on 27 September 2026, two of which had already been exploited to plant webshells. CISA ordered US federal civilian agencies to remediate by 30 September and to run forensic triage, and the Dutch national cyber centre says the worst of the two hands attackers full control of the gateway.
A five-item daily brief: what happened, why it matters and what to watch. Written by the desk, verified by editors.
