Security

Protect 360 blends credit monitoring, dark-web alerts and data-broker removal, showing how banks are extending customer protection beyond payment fraud.

A revised verification programme introduces tiered access for vulnerability research, incident response and authorised red-team work.

The company says frontier models are increasing the number of findings in its code base, shifting the security bottleneck from discovery to risk-based remediation.

Microsoft's 2026 Digital Defense Report puts agent identities, data access and tool permissions at the centre of AI security. Banks should test authority across complete workflows, including agent handoffs.

The Bank of England has linked the AI investment boom with frontier-model cyber and operational risk, placing financing, resilience and governance in one financial-stability frame.

OpenShell and the Sentry reference design move agent monitoring into runtime and hardware layers, with JPMorganChase, Microsoft and leading security vendors among the named supporters.

Amazon Web Services argues that prompt injection, excessive agency and data leakage share one root problem: organisations have not controlled what an agent may trust, retrieve or do.

Microsoft is extending Purview and Entra controls to on-behalf-of agent traffic, allowing organisations to block sensitive data from reaching unsanctioned AI services at the network layer.

Palo Alto Networks is applying Anthropic, OpenAI and open-weight models to continuous offensive testing, with Unit 42 specialists validating attack paths and fixes.

EvilTokens allegedly packaged device-code phishing and account compromise as a subscription service.

Google’s early-access Home MCP server lets compatible AI clients inspect device state, read history and execute supported commands. The control problem is now cyber-physical.

Smarsh and Shield both launched MCP servers for regulated communications data on 16 September. The pattern suggests MCP is becoming a governed enterprise interface, not just developer plumbing.

Exprivia and identifAI are combining deepfake detection with cybersecurity and systems-integration capability, creating a route for synthetic-content verification into regulated enterprise security.

Anthropic’s latest threat report says malicious users are increasingly applying AI to execute and coordinate cyber operations, not simply to generate advice or code.

F5’s Workforce AI Security focuses on a core agent risk: software using a human user’s permissions to call tools, move data and act across enterprise systems.