NetFoundry

At A Glance Part one of a six-part series on Zero Trust for AI agents. Vendor-hosted AI agents connect inbound into the systems you run, which makes your enterprise a public-facing service provider overnight. Vulnerability exploitation was the top way into breaches in the 2026 Verizon DBIR at 31%, and third-party involvement in breaches rose from 30% to 48%. Every...

At A Glance In May 2026, the National Security Agency (NSA) published its first security guidance written specifically for the Model Context Protocol (MCP), with nine recommendations for organizations running MCP in production. The recommendations fall across three control layers: identity, network, and application. No single product covers all nine. NetFoundry enfor...

At A Glance Flexera’s 2026 State of the Cloud report found that 88% of organizations use more than one cloud, and 73% run a hybrid mix of public and private cloud. Legacy “hybrid cloud” microsegmentation usually means a separate tool and policy model for each environment, and attackers move through the gaps between those models. An identity-first fabric enforces one ...

At A Glance Nearly 440 new network-exploitable CVEs published October 2–8, 2026 52 cleared our severity bar (CVSS 8.6+), including 2 rated a perfect 10.0 Featured vulnerability: CVE-2026-107204, an unauthenticated remote code execution flaw in LMCache, an open-source caching layer for large language model serving Two AI inference caching projects, LMCache and Moon...

At A Glance Almost every remote exploit needs a reachable listening port, which is why internet-facing edge devices and security appliances draw so many attacks. Vulnerability cloaking has the protected service dial outbound to an identity-based overlay and open no inbound port, so a scan finds nothing to connect to. A session forms only when both ends present a veri...