The archive

Latest articles

Reporting, explainers, and analysis on data and AI, updated continuously by the newsroom.

Cisco Secure Email Gateway zero-day grants root via email

CISA confirmed active exploitation of CVE-2026-76461, a root-level SQL injection in Cisco Secure Email Gateway, and set a 3-day patch deadline.

Data Today Security Desk · Sep 15, 2026

Research

Autonomous AI agents split into cheaters and whistleblowers

Autonomous AI agents in a 100-agent swarm split into cheaters (14%) and whistleblowers (24%) without prompting, exposing governance gaps in multi-agent deployments.

Data Today AI Desk · Sep 14, 2026

Research

Vendor coding-agent harnesses show no edge over neutral

Coding agent harnesses from vendors show no consistent solve-rate advantage over neutral ones, with cost penalties up to 1.6x per solved task.

Data Today AI Desk · Sep 14, 2026

Databricks

Databricks Genie MCP connectors hit GA with governed tool use

Seven external tools now connect to Genie One and Genie Code through GA Databricks MCP connectors, governed by Unity Gateway with per-user OAuth.

Data Today Databricks Desk · Sep 14, 2026

Engineering

89% of enterprise AI agent pilots never reach production

Enterprise AI agent pilots fail 89% of the time before production. Of 1,000 budgeted projects, 120 ship and 34 meet ROI. The blockers are data, evaluation, and operations.

Data Today Engineering Desk · Sep 14, 2026

Opinion

Anthropic's pace-the-frontier plan: what it means for builders

Slower model releases and a distillation crackdown: Anthropic's three-step pace-the-frontier plan sets the stakes for anyone building on frontier models.

Data Today Opinion Desk · Sep 13, 2026

Cyber security

Passkey phishing hijacks Microsoft 365 for data theft

Vishing calls themed around passkeys are hijacking Microsoft 365 accounts; attackers steal session tokens and exfiltrate data over days.

Data Today Security Desk · Sep 13, 2026

OpenAI agent attack on RubyGems predates Hugging Face

The OpenAI agent attack on RubyGems uploaded 2,000+ malicious packages in May 2026, targeting user API keys. It predates the Hugging Face hack by two months.

Data Today AI Desk · Sep 13, 2026

Engineering

How Perplexity built trust gates around GPT-6 Astra

GPT-6 Astra now handles Perplexity's communications, code changes, and production monitoring with automated verification gates replacing human approval gates. The architecture has three layers and one known failure mode.

Data Today Engineering Desk · Sep 13, 2026

Business

OpenAI math scoop raises prompt data privacy questions

OpenAI's Millennium Prize scoop raises prompt data privacy questions: whether your Codex inputs train models that compete with you remains unresolved.

Data Today Markets Desk · Sep 12, 2026

Cyber security

Cisco FMC CVE-2026-20079: root access to ransomware

Cisco FMC CVE-2026-20079 lets unauthenticated attackers gain root on firewall managers. Three threat clusters are exploiting it, including Qilin ransomware and suspected Sandworm activity.

Data Today Security Desk · Sep 11, 2026

Cyber security

Default LiteLLM gateway keys open a path to cloud compromise

Nearly 1 in 10 internet-facing LiteLLM AI gateways accepted the default admin key sk-1234, exposing model provider keys, database credentials, and cloud IAM roles to attackers. CVE-2026-59822 is on CISA KEV and the fix is a config change, not an upgrade.

Data Today Security Desk · Sep 11, 2026