DevSecOps

Agentic AI Identity Security: Why IAM Must Evolve Now

Agentic AI Identity Security: Why IAM Must Evolve Now

Agentic AI, Application Development, Cyber Security, DevSecOps /

AI agents have created a new class of identity security threat that traditional IAM platforms were never designed to handle. SecureAuth CEO Geoffrey Mattson outlines why continuous behavioral profiling and adaptive authorization are now essential for enterprises deploying agentic AI. ECI Research data shows AI-enabled tools are the top investment priority for 2026, making the security gap urgent.

Agentic AI Identity Security: Why IAM Must Evolve Now Read More »

Google Gemini 3.6 Flash: Cheaper, Faster Agentic AI

Google Gemini 3.6 Flash: Cheaper, Faster Agentic AI

AI, Application Development, Application Security, Cloud, Machine Learning /

Google Cloud has released Gemini 3.6 Flash, 3.5 Flash-Lite, and 3.5 Flash Cyber alongside the CodeMender autonomous vulnerability remediation agent. The releases target the economics of production agentic AI workloads, with 3.6 Flash delivering improved performance at lower token costs than its predecessor. CodeMender, integrated with Wiz, aims to automate the gap between vulnerability discovery and code remediation.

Google Gemini 3.6 Flash: Cheaper, Faster Agentic AI Read More »

Healthcare IoT Endpoint Security: The Symphion Program Explained

Healthcare IoT Endpoint Security: The Symphion Program Explained

Application Development, Compliance, Security /

Printers account for 20% of healthcare network endpoints but remain almost entirely unmanaged from a cybersecurity standpoint. Symphion’s new program targets the governance vacuum that has allowed this risk to accumulate for decades. ECI Research examines what it means for ITDMs and security architects.

Healthcare IoT Endpoint Security: The Symphion Program Explained Read More »

Cisco Acquires Astrix to Lead Non-Human Identity Security

Cisco Acquires Astrix to Lead Non-Human Identity Security

AI, Application Development, Automation, Cloud /

Cisco has acquired Astrix Security to extend its Cloud Control platform into non-human identity governance for AI agents. The deal addresses a fast-growing attack surface as autonomous agents proliferate across enterprise environments. ECI Research examines the strategic rationale, integration risks, and competitive implications.

Cisco Acquires Astrix to Lead Non-Human Identity Security Read More »

Red Hat Digital Sovereignty & Lightwell: EMEA Analyst Take

Red Hat Digital Sovereignty & Lightwell: EMEA Analyst Take

Application Development, Cloud, Compliance, Open Source, Security /

Red Hat’s EMEA Analyst Update advanced three strategic themes: OpenShift crossing $2B ARR, the GA of Confirmed Sovereign Support for EU customers, and the launch of Project Lightwell, a Red Hat and IBM supply chain security clearinghouse. ECI Research analysis finds the sovereignty and supply chain security plays are structurally durable, backed by regulatory mandates and a €5B engineering commitment to secure 150,000-plus open-source packages.

Red Hat Digital Sovereignty & Lightwell: EMEA Analyst Take Read More »

Recast Bundles Endpoint Patch Management Tools as CVE Surge Hits 341%

Recast Bundles Endpoint Patch Management Tools as CVE Surge Hits 341%

Application Development, Enterprise IT Strategy, Security /

Recast has launched a bundled offering combining endpoint remediation, third-party patching, and hardware lifecycle management in response to a 341% surge in CVEs tracked in the first half of 2026. The announcement reflects a broader shift in enterprise IT: patching is no longer a scheduled task but a continuous operational requirement. ECI Research data shows that most engineering teams spend the vast majority of their time on maintenance rather than innovation, making operational efficiency tools like this bundle a high-priority investment.

Recast Bundles Endpoint Patch Management Tools as CVE Surge Hits 341% Read More »

BCNEXXT Vipe: Cloud-Native Playout at IBC2026

BCNEXXT Vipe: Cloud-Native Playout at IBC2026

Application Development, Cloud, Infrastructure /

BCNEXXT is showcasing a new version of its cloud-native playout platform Vipe at IBC2026, promising up to 80% lower operating costs by eliminating the one-channel-to-one-server model. The software-defined architecture pre-assembles content ahead of transmission and manages operations by exception. ECI Research examines the architectural, financial, and security implications for broadcast ITDMs and engineering teams.

BCNEXXT Vipe: Cloud-Native Playout at IBC2026 Read More »

Argon2 Password Security: Stronger Hashing, Smarter Limits

Argon2 Password Security: Stronger Hashing, Smarter Limits

Application Development, Compliance, Cyber Security /

Specops Software has published research showing Argon2id is 451 million times slower to crack than SHA256, but a $2,100 CPU still outpaces an eight-GPU rig. The findings highlight why stronger hashing must be paired with continuous compromised credential monitoring. ECI Research data shows software supply chain security is a top enterprise investment priority for 2026.

Argon2 Password Security: Stronger Hashing, Smarter Limits Read More »

GitLab 19.2: Agentic DevSecOps Tackles the AI Code Backlog

GitLab 19.2: Agentic DevSecOps Tackles the AI Code Backlog

AI, Application Development, Automation, DevSecOps, Enterprise Software /

GitLab 19.2 introduces agentic automation designed to clear the review and security backlog that AI-generated code creates. Key features include Dependency Scanning Auto-Remediation, Security Review Flow, and Custom Flows, all governed by native audit trails and approval gates. ECI Research data shows why this architectural bet aligns with where enterprise engineering pain actually sits.

GitLab 19.2: Agentic DevSecOps Tackles the AI Code Backlog Read More »

Why Standard Software Still Matters in the AI Era | ECI Research

Why Standard Software Still Matters in the AI Era | ECI Research

AI, Application Development, Automation, DevOps, Platform Engineering /

anynines CEO Julian Fischer argues that AI-generated software feeds on knowledge created by the standard software ecosystem rather than replacing it. ECI Research data shows engineering teams spend most of their time on maintenance, not innovation, making the promise of AI prototyping seductive but incomplete. The vendors that survive will be those who can prove their products contain judgment, accountability, and operational depth that no prompt can reproduce.

Why Standard Software Still Matters in the AI Era | ECI Research Read More »