Year: 2026

This week: Langflow's public MCP endpoint flaw and 1,248 new CVEs. Reachability Watch tracks new network-exploitable CVEs and KEV-bound vulnerabilities every week....

Legacy microsegmentation demands a full network map before you deploy. NetFoundry's dark-by-default model lets you segment one workload at a time —...

906 new CVEs this week, three AI-agent tools with authentication disabled by default, and how Identity-First Reachability closes the gap....

NetFoundry delivers zero trust AI agent security executive sponsors can govern: one non-human identity model across every LLM, no firewall exceptions required....

The DoW must hit Zero Trust Target Level by FY2027 and PQC by 2030–2031. Both point to the same fix: identity-first reachability,...

CSA's new Zero Trust Microsegmentation Guidance defines two segmentation models and an operating lifecycle for IT, OT, and AI. See how NetFoundry...

AI blast radius is the business risk your board can't hand off to IT. See why every executive must own it, and...

See why Zero Trust guidance leads to identity-defined reachability—and how an open-source lab turns the model into operational evidence....

This week's Reachability Watch covers 398 new CVEs, a WWBN AVideo admin token that never expires, and how Identity-First Reachability closes the...

Agents calling other agents create traffic your segmentation was never built to see. Here's why east-west AI connections are the containment gap...

The 2026 Verizon DBIR found vulnerability exploitation beat stolen credentials for the first time in 19 years. Here's what that means for...

The 2026 Verizon DBIR found vulnerability exploitation beat stolen credentials for the first time in 19 years. Here's what that means for...

OpenAI agents used a stolen Tailscale key to breach Hugging Face. See how NetFoundry's zero trust overlay changes what a stolen credential...

NetFoundry's Reachability Watch tracks new network CVEs and actively exploited KEVs every week — see what identity-first reachability would have stopped....

VPNs grant network-level access through internet-facing inbound ports — the opposite of Zero Trust. Learn why the architecture is unfixable and what...

The 2026 bulk-power national emergency covers installed BESS, inverters, and their remote access. Here’s how utilities can isolate CATL, BYD, EVE, REPT,...