Signal criticality: High
What happened: Dark Reading published "BragJack Attack Can Turn a Browser's Agentic AI Against It". A new type of attack hijacks the AI assistant built directly into various browsers to access sensitive information, execute malicious actions, and exfiltrate data The article focuses on governance, identity, guardrails, or permission boundaries around AI agents that can act with real system access. The practical question is what permissions, connected data, or follow-on actions this signal can influence in a real deployed workflow.
Key takeaways:
Original source: https://www.darkreading.com/endpoint-security/bragjack-browser-agentic-ai
Signal criticality: High
What happened: The Hacker News published "CISO's Expert Guide to Agentic Pentesting for Websites". Attackers now weaponize new vulnerabilities in about five days (Mandiant, part of Google Cloud). The median organization takes 43 days to patch one (Verizon DBIR 2026). A new free guide explains how autonomous AI agents are closing that gap, and what security leaders must demand before pointing one at production. TL;DR Exploitation is now the front door. It starts 31% of breaches (Verizon DBIR The report describes a concrete compromise, exposure, or abuse pattern with direct defensive implications.
Key takeaways:
Original source: https://thehackernews.com/2026/09/cisos-expert-guide-to-agentic.html
Signal criticality: High
What happened: Help Net Security reported that dataminr uses agentic AI to predict and verify security threats Dataminr has announced Dataminr Advanced for Corporate Security , delivering agentic AI capabilities that give corporate security teams the confidence to protect their people, sites, and operations before risk escalates. Akuity gives AI agents operational context to safely ship software Akuity has introduced its Agentic Control Plane and MCP Server. Cohesity adds recovery capabilities for AI agents and the data they manage Cohesity has introduced Cohesity Agent Resilience .
Key takeaways:
Original source: https://www.helpnetsecurity.com/2026/09/18/new-infosec-products-of-the-week-september-18-2026/
Signal criticality: High
What happened: Rapid7 Blog published "Rapid7 Named Among Notable Vendors in Forrester MDR Landscape: Why the Future is Exposure-informed, Preemptive MDR". The managed detection and response (MDR) market has reached a turning point. We’ve gone beyond the baseline of 24/7 monitoring focusing on the speed of detection and moved to a world with a convergence of exposure management and response to deliver measurable, outcome-based defenses of a larger, AI-driven attack surface. For anyone evaluating MDR right now, the Managed Detection and Response Services Landscape, Q3 2026 report by Forrester is a useful map that lays out...
Key takeaways:
Original source: https://www.rapid7.com/blog/post/dr-forrester-mdr-landscape-notable-vendor-preemptive
The strongest signal today is that AI security is being decided in the surrounding control layer — permissions, connectors, deterministic workflow design, response speed, and the infrastructure that still underpins trust. That is a more durable framing than generic agent hype, and it is the one worth carrying forward.