TLDR IT 2026-10-22

September 2026 data shows more than half of Field Effect-protected organizations run six or more AI tools.

Each tool needs an owner, a vendor check, and a policy that allows or prohibits it. Governance teams face an uphill but winnable battle.

Field Effect's free AI Governance Playbook gives you five controls, from tool inventory to incident response, with audit questions that get specific: MCP integrations, free-tier data retention, and how fast you can revoke access.

Download the playbook.

Looking for more data-backed research on AI security? Visit the Securing AI hub

OpenAI has acquired Orchestra Bio, a platform designed to help biopharma teams coordinate the complex process of drug development. The acquisition brings Orchestra's team and technology together with Rosalind, OpenAI's existing life sciences research initiative. Together, the combined effort aims to build AI agents that assist researchers in connecting scientific discoveries with clinical studies and regulatory workflows.

Critical vulnerabilities discovered with AI assistance in PHP, a programming language powering much of the web, have prompted websites to temporarily shut down for emergency updates. Security agencies warned that the flaws could enable remote code execution, while researchers and technology companies worked to deliver patches before attackers could exploit them.

Blacksmith raised $66 million in a Sequoia-led Series C, reaching a $1 billion valuation just two months after its previous funding round. The continuous integration platform has grown annual recurring revenue 17-fold as AI coding agents generate increasing volumes of software that require automated building, testing, and validation.

Salesforce announced an agreement to acquire customer engagement platform Braze for approximately $5.66 billion, offering $47.50 in cash per share. The transaction is expected to close in fiscal 2028, pending shareholder and regulatory approvals. Following the news, Braze shares surged more than 51% to close at $45.57.

Modern developer tools must provide shared interfaces that humans, coding assistants, and APIs can operate simultaneously to avoid turning users into reverse centaurs. To address this, the Explosion team built Ellf, an agentic NLP development platform that generates matching UIs and CLIs from Python functions and type hints. Coding assistants have made self-hosted cluster architectures practical for more teams by helping with setup and debugging.

Enterprise technology complexity sprawl makes disaster recovery increasingly difficult by obscuring what a trustworthy system normal state looks like. CIOs need to treat inventory, dependency mapping, and governance as active recovery capabilities rather than documentation exercises. Furthermore, organizations should establish decision rights and conduct comprehensive organizational testing before incidents occur to ensure they can evaluate changes and dependencies under pressure.

Building across clouds and data centers gets complicated fast. From routing and resilience to egress costs and provider choices, small oversights can create bigger problems. Megaport's guide covers 10 common infrastructure connectivity mistakes and what to do instead. Download it to help build a resilient, scalable hybrid and multicloud network.

Download the guide

Amazon ECS Gateway is a managed ingress solution that simplifies containerized application networking by dynamically provisioning and managing Application Load Balancers. The new service allows platform teams to define centralized networking standards for multiple clusters, while application teams can opt in without requiring networking expertise. ECS Gateway supports host-based routing, allows up to 25 services to share an ALB, and provides each service with a unique DNS hostname. It is available at no additional charge across all commercial AWS Regions.

Databricks has introduced Agent Memory in beta on Agent Bricks, enabling AI agents to retain user preferences, organizational knowledge, and workflows across conversations. Built on Lakebase and its MemCurrent architecture, the system tripled agent task success rates while reducing token usage by 31% in internal benchmarks.

Researchers report that threat actors are compromising privileged Google Cloud credentials via phishing campaigns to hijack cloud billing accounts for unauthorized mass AI execution, specifically targeting Gemini API resources. Attackers leverage excessive permissions, modify domain restriction policies, and link external, attacker-controlled projects to victim billing accounts to offload costs. Organizations face rapid financial surges reaching hundreds of thousands of dollars within days while prompt payloads remain hidden in foreign tenants.

Google introduced enterprise search capabilities for its air-gapped Distributed Cloud, allowing organizations to search sensitive documents with Gemini while keeping data and models entirely within their own infrastructure.

DeepSeek has released its high-performance inference framework as open source, giving developers access to infrastructure designed to reduce AI inference costs.

An open, Kubernetes-native serving stack with cache-aware routing, multi-tenant traffic control, tiered KV cache, and high availability ready for production on Google Cloud.