Shared entity / Policy dependency
48 threats catalogued against Google's Agent Payments Protocol v0.2, eight of them High severity, because signed mandates do not cover the pre-authorization context
arXiv
Policy dependency / Stack layer
Benioff Called the SaaSpocalypse "Nonsense" the Same Week Salesforce Spent a Record $27B on Buybacks and Stock Jumped 12%
CNBC (corroborated by Motley Fool buyback and Fortune coverage, 2026-08-21 and 2026-08-26)
Policy dependency / Stack layer
Z.ai Held GLM-5.3's Weights Back Two Weeks Over Its Own Cyber Scores, With a Cursor Bug as the Headline
paddo.dev
Policy dependency / Stack layer
Google Cloud Shipped Gemini Enterprise for Financial Services With 50 Skills, 13 Connectors and a Partner Agent Marketplace
Google Cloud Blog (corroborated by PRNewswire, 2026-08-25 12:00)
Policy dependency / Stack layer
gemini-cli Blocks SSRF Through MCP OAuth Discovery, Including DNS Rebinding
GitHub
Policy dependency / Stack layer
browser-use/browser-harness v0.1.10 is a pure agent-security release: CDP credentials redacted from logs and orchestrator daemons now fail closed
GitHub
Policy dependency / Stack layer
Weaviate v1.39.2 makes its MCP server stateless and refuses GET with a 405
GitHub
Policy dependency / Stack layer
OpenAI's official Hugging Face incident report says its own CoT monitor would have paged security more than a day before the breach
OpenAI, with detail from TechCrunch and Hacker News item 49454314