supply chain security

AI Agent Secrets Security: What GhostAction Reveals

AI Agent Secrets Security: What GhostAction Reveals

GitGuardian’s October roundup documents the return of the GhostAction supply chain campaign and introduces deterministic AI hooks for coding assistants. The research reveals a structural gap: secrets detection has not kept pace with AI agent adoption, leaving credentials exposed in directories and log files that traditional vault coverage never reaches.

AI Agent Secrets Security: What GhostAction Reveals Read More »

AI Agents, Open Source Risk, and the Governance Gap | ECI Research

AI Agents, Open Source Risk, and the Governance Gap | ECI Research

At Open Source Summit Europe 2026, speakers from Valkey, Microsoft, the City of Munich, and the Linux kernel community converged on a single challenge: who is responsible for the infrastructure and compliance choices AI makes on your behalf? ECI Research examines what the keynotes reveal about the governance gap facing IT leaders and developers in 2026.

AI Agents, Open Source Risk, and the Governance Gap | ECI Research Read More »

FINOS OSERA: Backport Patching for Financial Services Security

FINOS OSERA: Backport Patching for Financial Services Security

FINOS has launched OSERA, a platform that backports security patches to the legacy open-source dependency versions large banks are actually running. Paired with a new set of remediation standards agreed upon by member institutions, OSERA addresses the gap between upstream security fixes and production reality in regulated environments. AI-enabled threat capabilities are widening that gap faster than traditional patch cycles can close it.

FINOS OSERA: Backport Patching for Financial Services Security Read More »

Europe's Physical AI Advantage: What Industrial Leaders Need to Know

Europe’s Physical AI Advantage & What Industrial Leaders Need to Know

Europe is leveraging decades of heavy-industry data to build physics-aware AI that American hyperscalers cannot easily replicate. Neural Concept’s $100M Series C and peers like PhysicsX signal a category forming around industrial AI with measurable ROI. ECI Research breaks down what it means for enterprise buyers and engineering teams.

Europe’s Physical AI Advantage & What Industrial Leaders Need to Know Read More »

Accuris BOM Intelligence AI: Verified Data Meets Supply Chain Risk

Accuris BOM Intelligence AI: Verified Data Meets Supply Chain Risk

Accuris has launched new AI capabilities for BOM Intelligence, combining natural-language component querying, continuous risk monitoring, and predictive compliance intelligence on a foundation of 1.3 billion verified components. The announcement makes a pointed argument that AI built on unverified data automates confusion rather than accelerating decisions. ECI Research analysis explains why verified data is becoming the real competitive moat in enterprise AI.

Accuris BOM Intelligence AI: Verified Data Meets Supply Chain Risk Read More »

Agentic AI Identity Security: Why IAM Must Evolve Now

Agentic AI Identity Security: Why IAM Must Evolve Now

AI agents have created a new class of identity security threat that traditional IAM platforms were never designed to handle. SecureAuth CEO Geoffrey Mattson outlines why continuous behavioral profiling and adaptive authorization are now essential for enterprises deploying agentic AI. ECI Research data shows AI-enabled tools are the top investment priority for 2026, making the security gap urgent.

Agentic AI Identity Security: Why IAM Must Evolve Now Read More »

Healthcare IoT Endpoint Security: The Symphion Program Explained

Healthcare IoT Endpoint Security: The Symphion Program Explained

Printers account for 20% of healthcare network endpoints but remain almost entirely unmanaged from a cybersecurity standpoint. Symphion’s new program targets the governance vacuum that has allowed this risk to accumulate for decades. ECI Research examines what it means for ITDMs and security architects.

Healthcare IoT Endpoint Security: The Symphion Program Explained Read More »

Cycloid's Sovereign IDP: Exit-by-Design for Regulated Enterprises

Cycloid’s Sovereign IDP: Exit-by-Design for Regulated Enterprises

Cycloid has published a reference architecture for sovereign Internal Developer Platforms built around an exit-by-design philosophy. The report argues that data residency alone is insufficient and that organizations must control the entire software delivery control plane. ECI Research analysis examines the architectural, governance, and competitive implications for regulated enterprises.

Cycloid’s Sovereign IDP: Exit-by-Design for Regulated Enterprises Read More »

Cisco Live 2026: Agentic AI Security and the WideField Bet

Cisco Live 2026: Agentic AI Security and the WideField Bet

Cisco used Cisco Live US 2026 to announce the acquisition of WideField Security, expanding Splunk’s Agentic SOC with non-human identity intelligence. Combined with the Athena open-source coalition and campus network capacity research, Cisco is building an integrated trust layer for the agentic AI era. ECI Research analyzes what it means for enterprise security strategy and infrastructure planning.

Cisco Live 2026: Agentic AI Security and the WideField Bet Read More »

Atos Bets on Sovereign AI Security With CrowdStrike and Microsoft

Atos Bets on Sovereign AI Security With CrowdStrike and Microsoft

Atos’s June 2026 announcements reveal a coordinated sovereign AI strategy spanning threat management, agentic productivity, and healthcare infrastructure. ECI Research analyzes what the CrowdStrike and Microsoft partnerships mean for enterprise security buyers and the broader sovereign AI market.

Atos Bets on Sovereign AI Security With CrowdStrike and Microsoft Read More »