The internet faces a new naming and trust problem with AI agents, mirroring the early DNS era. Security incidents, such as an AI agent rewriting its own security policy at a Fortune 50 company, highli…
Turva.dev deployed four AI agents running Claude Fable 5 to re-check specification claims in its guides against primary sources, finding one high-severity issue in the MCP guide where the SEP-2127 pro…
OpenSSH 10.4 has been released, adding experimental support for a composite post-quantum signature scheme combining ML-DSA 44 and Ed25519. The release also enforces sandbox support on Linux, requiring…
The IETF has published draft-sharif-attp-00, the Agent Trust Transport Protocol, which introduces a five-dimension trust scoring model for agent-to-agent messaging. The protocol addresses vulnerabilit…
A coalition including Cloudflare, Mozilla, Google, Microsoft, and Shopify has proposed PACT (Private Access Control Tokens) to replace CAPTCHAs and verify human web traffic without tracking users or r…
Cloudflare, major browser vendors including Mozilla Firefox, Google Chrome, and Microsoft Edge, and Shopify are developing the Private Access Control Tokens (PACT) protocol to replace invasive bot det…
Web standards advocate Daniel Appelquist argues that human user needs must remain the top priority in web development, even as AI technologies advance. He emphasizes that AI systems are not people and…
The Linux Foundation working group released the Agentic Resource Discovery (ARD) specification, a draft discovery layer that allows domains to advertise agent capabilities via a manifest at /.well-kno…
The Internet Engineering Task Force (IETF) is considering standards changes that would allow websites to block automated access, threatening the open web. Proposals from the AI Preferences and Web Bot…
Neo4j announced support for post-quantum hybrid key exchange in its 2025.01 release to defend against future quantum computer attacks and current Harvest Now, Decrypt Later threats. The feature uses X…
The IETF and other standards bodies are accelerating efforts to establish agent identity standards, addressing challenges like static authorization grants for dynamic needs. Anthropic supports Workloa…
The industry is transforming Non-Human Identity (NHI) to reduce attack surfaces by replacing vulnerable credentials like passwords and API keys with public-private key pairs and rapid rotation. Emergi…
A new website specification, "What a good website does," has been published as a platform-agnostic technical standard covering ten categories including SEO, accessibility, security, and agent readines…
The Agent Transfer Protocol (AGTP), a new transport protocol designed specifically for AI agent traffic, operates on its own port (4480) and uses mandatory headers like `Agent-ID` and `Owner-ID` to id…
Alan DeKok told NZNOG 2026 that RADIUS is here to stay, prompting the IETF's RADEXT Working Group to advance RADIUS 1.1, which removes MD5 dependency and lifts the 8-bit packet identifier limit to imp…
In May 2026, the U.S. National Security Agency (NSA) published a 15-page cybersecurity notice outlining minimum security requirements for production deployments of the Model Context Protocol (MCP), in…
Starting in July, apps distributed in France that use non-standard encryption algorithms or implement standard encryption (like AES or RSA) independently of iOS/macOS built-in encryption must comply w…