TLDR IT 2026-05-25

Cisco's study says agentic AI is dramatically changing WAN traffic patterns, not just increasing traffic volume. It projects enterprise network growth from 2.5x without agentic AI to 9x with it, with AI inference flows lasting longer, exhibiting different asymmetry and latency characteristics. This will require more resilient, observable networking and differentiated handling.

Scammers have been exploiting a loophole that lets them send phishing-style messages from a legitimate Microsoft alerting address, making the emails appear far more credible to recipients. Email authentication alone is not enough when attackers can abuse trusted platforms from the inside, putting more pressure on user awareness and downstream detection controls.

Enterprise AI procurement should prioritize task-focused specialization rather than defaulting to the largest available frontier models. In an OCR benchmark for Brazilian Portuguese, a specialized 3B model outperformed commercial frontier APIs on all fronts (quality, cost, and production stability) suggesting training history alignment is more decisive than parameter count.

Google Cloud COO Francis de Souza says the industry is in a transition period where AI capabilities are moving faster than security controls, and even Google is learning in real time. It's a useful reality check for IT leaders: nobody has AI security fully solved yet, so governance, guardrails, and iteration matter more than pretending the playbook is finished.

Pulumi Neo now supports scheduled automations that run on a cadence you define and open a pull request for each successful clean run. The launch includes four built-in templates (provider freshness check, encryption audit, backup audit, and activity digest) and supports safe-by-default execution via auto-approval and read-only permissioning.

Microsoft announced the public preview of cross-cluster networking for Azure Kubernetes Fleet Manager, enabling transparent east-west networking across multiple AKS clusters. Built with Cilium (dataplane) and Kubefleet (fleet orchestration) on top of Advanced Container Networking Services, it provides global service discovery, multi-cluster observability, and unified security/governance with zero-touch management.

While most VPNs market "no-logs" policies, top providers like NordVPN, ExpressVPN, Proton VPN, and Mullvad verify these claims through independent, third-party audits. These audits are only point-in-time snapshots, so experts recommend looking for brands with recurring reviews and transparent technical designs rather than relying on marketing slogans alone.

AI is becoming a new enterprise stack, reshaping how infrastructure, software, and business workflows are designed and operated rather than simply sitting on top of existing SaaS tools. AI is starting to look like a platform transition that could force changes across architecture, operating models, and how enterprise tech creates value.

A CloudBees survey found that enterprise AI-generated code adoption is driving more production failures and higher spending, highlighting the growing verification gap around AI-assisted development.

While permission boundaries must be manually applied per identity and fail to scale, Service Control Policies (SCPs) efficiently enforce organization-wide least privilege by centrally capping maximum permissions for all accounts and workloads automatically.