TLDR IT 2026-09-21

Anthropic has chosen Accenture and its AI business Faculty as its first embedded evaluator to help implement a proposed slowdown in AI development. The partnership aims to evaluate models, conduct alignment assessments, and test safeguards. Anthropic and Accenture each expect to invest at least $1 billion in the project over the next five years.

Researchers disclosed two flaws that allowed OpenAI Codex to escape its sandbox, including one that could execute commands on a developer's machine from the strictest read-only mode without an approval prompt. OpenAI fixed both issues, but the incident is another reminder that coding agents should be treated like privileged software: keep clients updated, limit local permissions, and be cautious about opening untrusted repositories with agentic tools.

AI can only be as effective as the enterprise's understanding of its own data, relationships, and decision-making rules. Without a clear ontology and traceable path from data to action, AI can automate the wrong interpretation at scale. This makes governance, context, and organizational learning more important, not less.

AI agents complicate traditional IAM because one employee action may now pass through a model, agent, plugin, service account, API, and downstream application before anything actually happens. Companies need to govern agents as identities themselves, including defined permissions, attributable actions, access reviews, and audit trails that can reconstruct the full chain from the human request to the resulting business action.

Microsoft has introduced two new features to its Cloud Rebuild Windows recovery tool in Windows 11 Experimental Insider build 26340.9502: Drive Sanitization and Remote Deployment via Recovery CSP. These additions allow IT administrators to securely sanitize device storage hardware and remotely trigger full Windows 11 reinstalls without requiring a USB installer.

Cloudflare explains how relatively small changes to the consistent-hashing implementation used by one of its Pingora services allowed it to reclaim more than 100TB of RAM across its global infrastructure. It is a great example of how engineering economics change at hyperscale: shaving bytes from a data structure and reducing unnecessary hash replicas can turn into infrastructure savings measured in hundreds of terabytes.

Supabase Auth can support unsupported SMS providers through the Send SMS hook, while GoTrue handles code generation, hashing, expiry, and session issuance. This approach keeps authentication logic within GoTrue and delegates only SMS delivery to a custom endpoint, avoiding the security risks of building a separate auth subsystem.

Google is expanding Workspace Studio with custom triggers, Apps Script-powered steps, webhooks, and integrations with tools including Slack, Jira, Salesforce, HubSpot, Asana, and QuickBooks. The end-user rollout begins September 21, and the important detail for IT is that these capabilities are off by default with admin controls for integrations, webhooks, approvals, and URL allowlists - exactly the governance layer increasingly needed for employee-built automations.

A six-stage operating model for building an operational technology (OT) security program that prioritizes process availability and safety over IT-style confidentiality.

The September 18 release adds expanded voice translation, translated in-meeting chat, 4K/60fps content sharing, meeting-summary participant lists, redesigned host controls, and other Workplace improvements.