Signal criticality: High
What happened: Help Net Security reported that f5 enhances AI Gateway to control AI costs, access, and security F5 has introduced enhancements to the F5 AI Gateway and integrated the solution into the F5 AI Security Platform. The enforcement point for the F5 AI Security Platform F5 introduced the F5 AI Security Platform earlier this year to give teams continuous visibility, governance, and protection across enterprise AI applications, models, agents, and the APIs connecting them. The enhanced F5 AI Gateway seamlessly enforces policies on every AI request, giving enterprises a unified control plane to govern how AI models, agents, and tools are accessed and used, while optimizing the economics of AI at scale.
Key takeaways:
Original source: https://www.helpnetsecurity.com/2026/08/19/f5-ai-gateway-enhancements/
Signal criticality: High
What happened: SecurityWeek reported that by Eduard Kovacs | August 18, 2026 (8:06 AM ET) Flipboard Reddit Whatsapp Whatsapp Email Cybersecurity giant Fortinet on Monday announced the acquisition of AI security company Virtue AI. Financial terms of the deal have not been disclosed, but Fortinet noted that the amount paid was immaterial to its business. Related : Cyera Acquiring Oasis Security in $1 Billion Deal Related : Cybersecurity M A Roundup: 21 Deals Announced in July 2026 Related : Bank of America to Acquire Cybersecurity Firm MDSec Related : Okta to Acquire Identity Threat Detection Firm Permiso Written By Eduard Kovacs Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek.
Key takeaways:
Original source: https://www.securityweek.com/fortinet-acquires-ai-security-company-virtue-ai/
Signal criticality: High
What happened: The Hacker News published "One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025". A single piece of infrastructure has been pulling records out of Salesforce and ServiceNow customer portals across multiple industries for more than a year, according to research published this week by agent security platform Reco. The activity, which Reco has named the City Forum campaign after a domain tied to the attacker's IP address, traces back to one server: 158.220.87.79, hosted on a The article focuses on governance, identity, guardrails, or permission boundaries around AI agents that can act with real system access.
Key takeaways:
Original source: https://thehackernews.com/2026/08/one-attacker-has-scraped-both.html
Signal criticality: High
What happened: AWS Security Blog published that without it, the request Lambda interceptor can’t receive the request header containing the inbound JWT, and the authentication pattern described in this post will not work. This isolation is designed to mitigate the risk of adversarial prompts instructing the model to access or exfiltrate authentication credentials, even if the agent is compromised. def build_system_auth_header(headers): """Validate JWT and construct Basic Auth header with system credential.""" auth_header = headers.get('Authorization', '') if not auth_header.startswith('Bearer '): return _error_response(401, "No Bearer token found in request.") # Validate JWT (defense-in-depth) claims = validate_jwt(auth_header[7:]) if not claims: return _error_response(401, "JWT validation failed.") # Retrieve system credential from Secrets Manager creds = get_system_credentials() # Construct Basic Auth header (RFC 7617) basic_auth_encoded = base64.b64encode( f"{creds['username']}:{creds['password']}".encode() ).decode() headers['Authorization'] = f"Basic {basic_auth_encoded}" return headers Conclusion A request Lambda interceptor in Amazon Bedrock AgentCore Gateway can bridge the gap between the authentication patterns supported by the gateway and the authentication requirements of legacy tool APIs that haven’t yet migrated to modern authentication standards.
Key takeaways:
Original source: https://aws.amazon.com/blogs/security/implement-custom-authentication-for-tools-integration-using-request-lambda-interceptor-in-agentcore-gateway/
Signal criticality: High
What happened: Rapid7 Blog published "Operation ASTERIX: Anatomy of a Crypto Fraud Pipeline". Operation ASTERIX overview Rapid7 researchers identified an exposed web directory on infrastructure used to support a cryptocurrency fraud operation. The server contained raw phone-number datasets, account-validation tools, enriched lead records, phishing panels, voice-dialing scripts, fake wallet applications, persistence mechanisms, and Telegram exfiltration code. Among the artifacts was evidence that the operator relied on AI coding assistants throughout the campaign's development; recovered prompts, shell history, and project files show AI being used to package Electron applications,...
Key takeaways:
Original source: https://www.rapid7.com/blog/post/tr-operation-asterix-crypto-fraud-vishing-phishing
The strongest signal today is that AI security is being decided in the surrounding control layer — permissions, connectors, deterministic workflow design, response speed, and the infrastructure that still underpins trust. That is a more durable framing than generic agent hype, and it is the one worth carrying forward.