Policy
Citrix NetScaler Is on the Exploited Catalog Again
CISA added CVE-2026-88779 on October 4. The catalog due date is October 7, the day of this briefing. The September NetScaler rows are a different pair of bugs.
Section
Briefing
Sourced notes for operators. The post is the alert. The official page is the fact.
Policy
The SEC Proposed a Path for Crypto Custody
On October 1 the Commission proposed custody rules for crypto assets held by advisers and regulated funds. The posts are the alert. Comments run from the Federal Register.
Technology
Astra Ultrafast Is a Speed Claim. The Bill Is Still Yours.
NVIDIA says GPT-6 Astra Ultrafast is up to 8x faster than Astra Standard on token generation. That number is theirs. The invoice is yours.
Technology
NVIDIA Put the Fence Outside the Agent
On September 28 NVIDIA posted that OpenShell enforces what an agent may do, and that a BlueField chip can watch from outside the software the agent runs in.
Policy
CISA Listed Three Bugs Attackers Are Already Using
WordPress on September 25, Apple on September 29, Cisco SD-WAN Manager on September 30. The posts are the alerts. The catalog holds the due dates.
Technology
Five Moves Gartner Wants from CISOs Before 2027
A September 30 note treats agents as insiders, a familiar voice as a weak approval, and post-quantum work as something that gets expensive if it waits.
Policy
The EU AI Act Did Not Slip. The High-Risk Part Did.
Article 50 transparency has been in force since August 2. Stand-alone high-risk duties move to December 2, 2027. A US buyer still has to ask which date the vendor is selling.
Policy
The Software Ingredients List Now Covers the Suite
CISA’s July 29 revision of the SBOM minimum elements applies to SaaS and AI software, not only to code you compile. The new fields are the ones to ask for.
Policy
The SEC Clock Starts When You Decide It Matters
Public companies disclose a material cyber incident on Form 8-K within four business days of the materiality call. The annual report still has to describe who watches the risk.
Technology
Gartner Revised the AI Bill. Most of It Is Not Your Budget.
The September forecast is $2.7 trillion, up 49.5%. About 56% of the table is infrastructure. The check a company signs is the feature inside software it already owns.
Technology
AI Spend Is Not the Same as AI Return
Gartner sees $2.59 trillion in AI spending this year. McKinsey still finds only a minority of firms attributing EBIT to it.
Policy
Chip Licenses Keep Moving. The Mid-Tier Still Waits.
BIS opened a case-by-case window for H200-class chips. Korea tightened AI-chip exports on Sept. 1.
Business
Cyber Insurance Got Cheaper. The Questionnaire Did Not.
Swiss Re puts 2026 global cyber premium at $16.4 billion with rates still down. The application still wants MFA.
Business
Software Buying Is an Operating Skill
The stack is no longer an IT catalog. It is how the company actually runs — and most firms still buy it like office supplies.
Policy
When Compliance Is the Product
Data residency, audit trails, and model clauses are no longer legal footnotes. They are packaging.
Technology
The AI Productivity Paradox at Mid-Market Companies
Tools landed in every department. Output did not. The bottleneck is workflow, not the model.
Markets
Private Credit Is Quietly Funding the Software Roll-Up
When public markets froze on multiples, direct lenders stepped in — and started acting like operators.
Policy
Chip Export Controls and the Suppliers Caught in Between
Policy is written in Washington. The P&L lands on toolmakers, packagers, and the mid-tier vendors nobody briefed.
Business
Cyber Insurance Is Rewriting the IT Budget
Underwriters now ask better questions than some boards. The answers are showing up as line items.
Startups
The New Unit Economics of AI-Native Startups
Gross margin is no longer a software story. Token costs, evals, and human review decide who scales.
Technology
Cloud Repatriation: When the Bill Becomes the Strategy
Finance is pulling workloads home. Engineering is discovering that “home” is a product decision, not a protest.
Opinion
Six Questions Every Board Should Ask About Generative AI
Most decks still sell possibility. Directors need a control framework that survives the next vendor cycle.
Business
Retail Media Networks Are Eating the Digital Ad Market
Closed-loop purchase data beat the open web. The next fight is over who owns the aisle.