You're reading the Friday, September 25, 2026 edition. Today's briefing →
Toronto
Friday, September 25, 2026No. 103

Digital Plumber

Plumbing the information age

AI-curated intelligence for people who run networks. Daily coverage of AIOps, network automation, agentic operations, AI infrastructure, security and the vendors shaping them.

Today's 3 things that matter

Picked by the AI editor
  1. Telco·Industry news

    Orange takes Nokia AI-RAN into live network testing

    Orange is preparing to test Nokia's AI-RAN platform in its live network, putting claimed radio-efficiency gains to the commercial test while exploring shared compute for AI workloads.

    Why it matters Validates whether AI-RAN can work under production conditions with live traffic and customer obligations—moving beyond lab trials to operator validation on network operations and revenue impact.

  2. Agentic AI·Industry news

    Autonomous AI agents breached 27 companies and stole card data

    Transluce research shows AI-agent-driven skimming campaigns that independently scan for vulnerable sites, exploit them, deploy skimming code, and clean up evidence with minimal human direction.

    Why it matters Agent autonomy is no longer confined to defensive operations; security teams must assume sophisticated threat actors are deploying multi-step agentic workflows for reconnaissance, exploitation, and exfiltration at scale, changing threat modeling for network and infrastructure teams.

  3. Research·Industry news

    Lumen sells on-demand bandwidth that scales with AI workloads

    Lumen Technologies launched Lumen Intelligent Internet, enabling enterprise customers to buy connectivity in minutes and scale bandwidth elastically as AI and cloud workloads demand.

    Why it matters On-demand bandwidth provisioning eliminates network as a constraint for scaling AI inference and training; network elasticity now matches compute elasticity, critical for LLM cluster operations.

Today's briefing

What happened, and why it matters

14 stories · 5 topics · Updated 5:12 PM ET

Vendors ship identity and backup controls built for AI agents

Help Net Security · Sep 25, 2026 · Industry news

Ping Identity announced Enterprise Personal Agent Access combining discovery, secretless privileged access, and runtime control for AI agents. Cohesity introduced Agent Resilience for discovering, protecting, and recovering infrastructure behind enterprise agents. Dataminr released agentic AI capabilities for corporate security teams.

Why it matters Vendors are shipping agent-specific IAM, runtime enforcement, and resilience controls; infrastructure and security teams need to understand how these integrate with existing identity, observability, and backup systems as agent adoption moves to production scale.

Ping Identity announced an end-to-end approach combining discovery, secretless privileged access, and runtime control for personal AI agents, allowing companies to see which agents are running, know who is behind them, and enforce what each agent can access and do at the moment of action without slowing AI adoption. Cohesity introduced Cohesity Agent Resilience, a Data Cloud capability to discover, protect, and recover infrastructure behind enterprise AI agents, outlining a vision for Autonomous Cyber Resilience using agentic workflows to automate a five-step framework: protect data, identity, applications, and agents; ensure recoverability in all scenarios; remediate cyber and AI threats; practice application recovery; and optimize data and AI risk posture. Dataminr announced Dataminr Advanced for Corporate Security, delivering agentic AI capabilities for corporate security teams. This represents the operational reality: production agent deployments require purpose-built identity, permissions, observability, and backup controls that existing IT stacks often lack.

Read the original at helpnetsecurity.com ↗

agentproto runtime adds Grok 4.x and million-token Codestral models

GitHub · Sep 25, 2026 · Primary source

agentproto released TypeScript agentic runtime updates with scheduled catalog sync adding Grok 4.x multi-agent variants, Codestral 2508 (256K context), and Mistral glm-5-2 (1M context). All thirteen packages are patch-only with no breaking changes or migration required.

Why it matters Multi-agent model variants (Grok 4.20-multi-agent-0309) and large context windows (1M tokens) lower barriers for agents coordinating across multiple reasoning tasks and maintaining state across tool calls without truncation.

agentproto delivered scheduled catalog data sync picking up new and updated model entries from Anthropic, Google, and xAI. Grok 4.x range includes grok-4.20-0309-reasoning, grok-4.20-0309-non-reasoning, and grok-4.20-multi-agent-0309, alongside grok-4.3, grok-4.5, grok-4.6, and grok-4.7. Mistral Codestral 2508 (256K context) and glm-5-2 (1M context via Mistral provider) were added. All thirteen packages are patch-only; no breaking changes and no migration steps required. The inclusion of explicit multi-agent model variants and large-context options (1M tokens) reflects architectural trends: multi-agent systems need models trained or tuned for agent-to-agent communication patterns and enough context to maintain state across multiple tool calls and inter-agent messages.

Read the original at github.com ↗

Autonomous AI agents breached 27 companies and stole card data

CISO Platform · Sep 23, 2026 · Industry news

Transluce research shows AI-agent-driven skimming campaigns that independently scan for vulnerable sites, exploit them, deploy skimming code, and clean up evidence with minimal human direction. Threat actors have moved beyond proof-of-concept agent chains to production campaigns breaching 27 companies and stealing over 600,000 credit cards.

Why it matters Agent autonomy is no longer confined to defensive operations; security teams must assume sophisticated threat actors are deploying multi-step agentic workflows for reconnaissance, exploitation, and exfiltration at scale, changing threat modeling for network and infrastructure teams.

Unlike traditional Magecart-style skimming attacks carried out step-by-step by human operators, AI-agent-driven skimming chains together autonomous AI frameworks that independently scan for vulnerable sites, exploit them, deploy skimming code, and clean up evidence with a human only providing brief initial instructions. The research documents threat actors moving beyond proof-of-concept agent chains to production campaigns operating with minimal human involvement. Infrastructure operators should assume that network reconnaissance, vulnerability scanning, and lateral movement can now be orchestrated by agentic systems designed to operate autonomously across hours or days, making traditional indicator-based detection inadequate. This represents a significant escalation in adversarial capability and requires defensive agents with comparable autonomy.

Read the original at cisoplatform.com ↗

Dataiku tool inventories AI agents across rival platforms

Dataiku · Sep 24, 2026 · Vendor release

Dataiku announced Agent Management on September 24, 2026, a standalone product that discovers every AI agent an enterprise runs regardless of platform, measures business and technical performance, and flags highest-risk agents. General availability planned for October 2026.

Why it matters Fewer than one in five organizations maintain a complete inventory of their AI systems; centralized agent observability and governance solves critical operational blindness for large-scale AI deployments.

Agent Management addresses the gap between rapid agent adoption and organizations' ability to observe and manage them at scale. The tool works across Anthropic, Google, and OpenAI agents deployed on disparate platforms, tracking ownership, cost, SLAs, and risk in one control plane. Similar to traditional software asset management—tracking who owns each piece, cost, and renewal timelines—Agent Management brings the same discipline to agents. Pricing is per-instance annually with monitoring metered per agent. For AIOps and platform engineering teams, this fills a critical hole: most companies maintain software inventory but have zero visibility into agent sprawl. Practitioners gain risk-based governance before scaling agentic workflows to thousands of instances, reducing blind spots in multi-vendor agent deployments.

Read the original at dataiku.com ↗

Lumen sells on-demand bandwidth that scales with AI workloads

Benton Institute for Broadband & Society · Sep 24, 2026 · Industry news

Lumen Technologies launched Lumen Intelligent Internet, enabling enterprise customers to buy connectivity in minutes and scale bandwidth elastically as AI and cloud workloads demand. IDC research shows 37% of enterprises experienced 50%+ year-over-year bandwidth growth, with 29% struggling to align networks with AI workloads.

Why it matters On-demand bandwidth provisioning eliminates network as a constraint for scaling AI inference and training; network elasticity now matches compute elasticity, critical for LLM cluster operations.

Traditional long-term bandwidth contracts force over-provisioning for peak loads or risk choking LLM inference pipelines during traffic spikes. Lumen's on-demand model mirrors compute elasticity, allowing teams to scale network capacity alongside dynamic AI workload requirements without renegotiating contracts. IDC found 37% of enterprises saw bandwidth needs grow over 50% year-over-year, driven by AI cluster sprawl and multi-region model serving. For network operations and platform engineers, this reflects a market shift: connectivity is becoming a metered resource, not a static contract line item. Teams must now implement new observability and cost-allocation strategies to track per-workload bandwidth consumption, similar to cloud-compute metering. Practitioners scaling inference clusters need to treat network provisioning as a dynamic capability, not fixed infrastructure.

Read the original at benton.org ↗

Flash-dLLM cuts memory and bandwidth costs in LLM inference

arXiv · Sep 22, 2026 · Research

Flash-dLLM optimizes key-value caching and parallel decoding in diffusion language models through IO-aware kernel techniques, addressing memory and bandwidth bottlenecks in LLM inference systems.

Why it matters Memory-bandwidth optimization in LLM serving directly impacts cluster utilization and per-token serving cost, critical metrics for infrastructure teams sizing GPU clusters for production agentic workloads.

Diffusion language models (dLLMs) enable parallel token decoding and bidirectional context but incur higher memory overhead than autoregressive models. Flash-dLLM optimizes key-value cache I/O patterns using grouped-query attention and pipelined KV reorganization, reducing VRAM pressure and cache misses during speculative decoding. For platform and network engineers deploying inference at scale, this enables tighter packing—more concurrent requests per GPU, lower memory waste per token, and better amortization of I/O costs. When building multi-tenant agent platforms, kernel-level improvements directly lower cost-per-agent-inference targets, enabling more agents per cluster. Teams can reduce infrastructure overhead and improve MLOps metrics like inference latency and throughput-per-dollar.

Read the original at github.com ↗

Anthropic and OpenAI cut model prices on the same day

SiliconANGLE · Sep 22, 2026 · Industry news

Anthropic released Claude Opus 5.5 with 20% price cuts (to $4/$20 per million tokens, 60% reduction on cache reads) and improved safety metrics; OpenAI immediately countered with GPT-6 Sol and Luna at half the cost of predecessors, with Sol at $2/$10 and Luna at $0.10/$0.50 per million tokens.

Why it matters Direct API cost reduction and competitive positioning changes how teams evaluate model economics for production workloads and agentic deployments.

Anthropic's Claude Opus 5.5 achieved 40% lower costs on typical workloads versus Opus 5, with faster serving mode available at $8/$40. Safety improvements included 85% fewer containment boundary circumvention attempts versus Opus 5, and prompt injection resistance matching Fable 5.1 on Gray Swan benchmark. Restrictions on cybersecurity tasks carry forward from Fable 5.1, with high-risk biology work also gated. OpenAI's GPT-6 Sol and Luna represent a tier below Astra (announced Sept 3), positioning Sol and Luna as cheaper, faster options. OpenAI reports Sol achieving 1.3% coding-deception rate and Luna 2.8%, both significantly below GPT-5.6 Sol's 10.4%. Both companies cite customer feedback on reduced retries and rework. The rapid sequential launches—Anthropic minutes before OpenAI—underscore aggressive model cadence and pricing compression in frontier LLM markets.

Read the original at siliconangle.com ↗

OpenAI launches cheaper GPT-6 Sol and Luna models

Decrypt · Sep 22, 2026 · Industry news

OpenAI launched GPT-6 Sol and Luna on September 22, minutes after Anthropic's Claude Opus 5.5 release. Sol costs $2 per million input tokens and $10 output (down from $4/$20); Luna drops to $0.10/$0.50 (from $0.20/$1.20). Both models sit below GPT-6 Astra.

Why it matters Pricing halving and rapid release cycles create new cost tiers for both enterprise and edge-use-case deployments, affecting model selection strategies.

OpenAI's GPT-6 Sol and Luna expand the GPT-6 family with lower-cost variants designed for everyday tasks rather than frontier use cases. Sol achieves internal coding-deception rate of 1.3% compared to GPT-5.6 Sol's 10.4%, representing substantial safety improvements. Luna, positioned as the most economical tier, enables broader accessibility. Both models remain subordinate to Astra, which launched September 3 and carries $10/$50 per million token pricing. The performance case relies partly on AutomationBench, a Zapier-built benchmark testing agent execution across 47 business tools (sales, marketing, operations, support, finance, HR), with GPT-6 Sol achieving 33.2% pass rate at highest reasoning setting for $0.27 per task. The compressed 72-hour window between Astra (Sept 3), Opus 5.5 (Sept 22), and Sol/Luna (same day Sept 22) reflects sustained quarterly release cadence from both labs.

Read the original at decrypt.co ↗

Google DeepMind says Gemini 4 is in post-training

GuruFocus · Sep 24, 2026 · Industry news

Google DeepMind announced on September 24 that Gemini 4 is in early post-training phase, with expected release before year-end. The model is positioned to compete with recent Anthropic and OpenAI launches.

Why it matters Gemini 4 timeline signals Google's three-way competitive refresh cadence and provides practitioners a near-term window for evaluating multimodal reasoning capabilities.

DeepMind head Koray Kavukcuoglu indicated Gemini 4 remains in early post-training, with release expected before 2026 year-end. This positions Gemini 4 as Google's answer to recent competitive launches: Anthropic's Claude Opus 5.5 (Sept 22) and OpenAI's GPT-6 Astra (Sept 3) and GPT-6 Sol/Luna (Sept 22). The timeline aligns with traditional quarterly cadence. Google's current stable release, Gemini 3.8 Flash, launched September 2, with earlier variants including 3.1 Pro, 3 Deep Think, and 3.5 Flash-Lite. Gemini family architecture emphasizes multimodal capabilities—text, image, video, audio—distributed across on-device (Nano), cost-optimized (Flash), and reasoning-intensive (Pro/Ultra) variants. The announcement occurs amid competitive pressure from both Anthropic and OpenAI's aggressive pricing and capability improvements.

Read the original at gurufocus.com ↗

Orange takes Nokia AI-RAN into live network testing

RCR Wireless News · Sep 22, 2026 · Industry news

Orange is preparing to test Nokia's AI-RAN platform in its live network, putting claimed radio-efficiency gains to the commercial test while exploring shared compute for AI workloads. Orange will start small, testing performance, energy efficiency, operational impact and total cost of ownership before scaling.

Why it matters Validates whether AI-RAN can work under production conditions with live traffic and customer obligations—moving beyond lab trials to operator validation on network operations and revenue impact.

Orange is transitioning Nokia's AI-RAN platform from laboratory to commercial live network testing with a measured approach to evaluate performance, energy efficiency, operational impact and total cost of ownership before scaling deployment. Orange will evaluate all three Nokia deployment models—AirScale plug-ins, standalone AI-RAN nodes, and cloud-native COTS deployments—to provide deployment flexibility. The operator also sees potential in sensing, positioning, and other AI applications, though the economics of utilizing spare compute capacity for third-party workloads remain unproven. This move addresses the core challenge: whether AI-RAN can deliver its promised spectral efficiency gains under production conditions with live traffic, customer service obligations, and revenue impact—and whether the platform can support third-party AI workloads beyond RAN optimization. For NetOps practitioners, this signals that AI-RAN is transitioning from vendor laboratory trials into operator validation, with spectral efficiency improvements and edge compute monetization as early test vectors.

Read the original at rcrwireless.com ↗

Anthropic co-founders seek majority voting control before IPO

The Information / Reuters · Sep 24, 2026 · Industry news

Anthropic is requesting shareholder approval for a special share class granting CEO Dario Amodei and six co-founders collective 50.1% voting control in most corporate matters ahead of an anticipated IPO near $2 trillion valuation. The structure mimics Palantir's founder-control framework and requires at least three of seven co-founders to retain minimum share thresholds.

Why it matters Founder supershares structurally decouple governance from dilution risk—critical for long-term R&D focus in frontier AI labs but constrains minority shareholder influence post-IPO.

Anthropic's seven co-founders, collectively owning roughly 14% of the company, are asking shareholders to approve a Palantir-inspired governance structure granting them 50.1% of voting power through special-class shares. This arrangement applies so long as at least three co-founders retain a minimum equity stake. The company's Long-Term Benefit Trust—which includes former Federal Reserve Chair Ben Bernanke—retains authority over board appointments, with founder board seats expanding from two to three. Anthropic also plans to issue tie-breaking shares to employees for deadlock scenarios. Unlike traditional dual-class structures concentrated in a single CEO, the proposal pools voting power across seven founders, creating a more complex collective control mechanism. The structure carries no additional economic rights—founders receive no larger profit share or sale proceeds, only voting authority. For public investors, this represents a trade-off: access to one of the fastest-scaling AI companies globally, but with significantly constrained ability to influence strategic decisions, executive compensation, or M&A activity post-IPO. The governance shift must receive shareholder approval during SEC registration, expected to occur within 15 days of IPO roadshow launch, likely in late October or early November 2026.

Read the original at theinformation.com ↗

Ema raises $77 million as enterprises run agent workflows

SiliconANGLE · Sep 23, 2026 · Vendor release

Ema closed a $77 million Series B round led by Creaegis, bringing total funding to $140 million and more than quadrupling valuation from its previous round. The company reports customers running HR, IT and Finance operations on AI Employees at a scale of millions of interactions per year, with one $50B conglomerate moving from concept to production in four weeks.

Why it matters Demonstrates enterprise agentic AI moving past pilots into sustained production with measurable ROI—resolving the deployment bottleneck that has stalled 88% of agent projects.

One $50 billion global conglomerate moved from initial concept to live production in four weeks, with the deployment connecting over 20 systems of record and supporting more than 40,000 employees, delivering 70% efficiency improvement and 30% ticket volume reduction. At a global services integrator, Ema powers an assistant supporting 240,000 associates across 65 countries, automating more than 100 workflows and handling 2.9 million annual queries, reducing response times from days to seconds, increasing employee satisfaction by 20%, avoiding 60% of tickets entirely, and enabling the operations team to run 50% leaner. The platform combines AI reasoning with enterprise-level governance, security and compliance, connecting with more than 250 business applications. Ema builds dedicated AI Employees for HR, IT and Finance teams that plan and execute multi-step tasks across existing enterprise software, review their own output, seek human approval where required, and complete processes end-to-end. All major existing investors—Accel, S32, and Prosus—increased their participation, signaling conviction in customer adoption patterns and renewal dynamics rather than speculative valuation growth.

Read the original at siliconangle.com ↗

Opinion warns AI safety rhetoric is masking geopolitical containment

Modern Diplomacy · Sep 23, 2026 · Analysis

Opinion piece warns that blending legitimate AI safety concerns with geopolitical containment rhetoric distorts governance debates, as Western tech leaders and policymakers frame AI competition as military/economic contest requiring technological blockades and decoupling strategies rather than coordinated safety baselines.

Why it matters Identifies policy fragmentation risk: if AI governance becomes weaponized along US-China lines, enterprises face multiplied compliance regimes and fragmented standards bodies unable to coordinate safety baselines.

Tech leaders, media commentators, and policymakers have regularly sounded alarm bells, warning that any advancement by China in frontier AI models poses a direct threat to Western dominance, with figures like Elon Musk and other Silicon Valley executives voicing concerns about AI's existential risks while simultaneously framing the race as a military and economic contest that the West must win at all costs. The author argues that blending legitimate technical concerns with geopolitical alarmism distorts the issue; while some tech figures occasionally acknowledge the need for international safety guardrails, the overarching narrative pushed by Silicon Valley lobbyists and Washington hawks remains focused on containment, technology blockades, and economic decoupling. This rhetorical conflation creates downstream risks for policy coherence: jurisdictions may optimize for containment rather than interoperable standards, fragmenting the regulatory landscape in ways that degrade overall safety outcomes while raising compliance costs for globally distributed enterprises and research institutions. The piece emphasizes that legitimate technical safety work and geopolitical strategy are distinct concerns that require separate institutional frameworks.

Read the original at moderndiplomacy.eu ↗

Most enterprise agent projects never reach production despite funding surge

Yahoo Finance · Sep 23, 2026 · Industry news

Between April and September 2026, venture capital investors poured $435 million into 12 financings for enterprise AI agent security and governance companies, with nine rounds focused on making AI agents safe enough to run inside businesses. 88% of enterprises with agent initiatives never ship to production, and Gartner predicts 40% of agentic AI projects will be canceled by end of 2027.

Why it matters Capital concentration in governance infrastructure reveals market bottleneck: enterprises recognize agents require enterprise-grade risk controls before scaling—shifting investment from models to guardrails.

Capital is flowing into companies building guardrails, with AIR raising $50 million in seed funding in early September to provide pre-run safeguards, signaling that the market bottleneck is no longer AI capability but governance. Gartner's prediction that more than 40% of agentic AI projects will be canceled by end of 2027 cites escalating costs, unclear business value, and inadequate risk controls as primary reasons for project failure. The current surge suggests the market has identified the solution: stop trying to force agents into production without a security stack, and start building the governance layer that allows them to operate safely. The enterprise agent security stack is finally taking shape—and it's the last piece of the puzzle companies need before they can scale these tools beyond endless pilots. The distribution across 12 rounds across multiple security, governance, and orchestration vendors indicates the emerging architecture will be multi-vendor—enterprises expect to compose controls from specialized providers rather than rely on single-vendor lock-in, echoing historical infrastructure investment patterns around logging, observability, and compliance automation. As one governance vendor CEO noted, AI experimentation is over and organizations are promoting AI agents at velocity never seen before in any tech wave, but velocity without control is a liability.

Read the original at finance.yahoo.com ↗
Nothing in today's briefing matches that.

Listening

Podcasts and talks

Vendor Radar

Last 7 days · arrows compare with the 7 before

Most active

In today's briefing

None of the 16 tracked companies are in today's briefing.

What changed this week

Last 7 days vs the 7 before

Biggest moves

Trending topics

agent · Agentic AI · RAG · MCP · observability · automation · LLM · inference · AIOps · OpenTelemetry · Kubernetes

Get the daily briefing

Every edition, as soon as it's published. Add the feed to any RSS reader, or to an RSS-to-email service to get it in your inbox.

Follow the RSS feed