
Your AI Agent Trusts a Poisoned Tool
Microsoft warns that a poisoned tool description can turn your AI agent into a data leak, with no rule broken and no bug exploited. What owners must lock down.

Microsoft warns that a poisoned tool description can turn your AI agent into a data leak, with no rule broken and no bug exploited. What owners must lock down.

Microsoft and AWS now embed their own engineers to build and run your AI, and to own the outcome. What owners must settle in the contract first.

Researchers showed a booby-trapped webpage can talk a browser AI agent out of its own safety rules and make it hand over passwords and access. What owners should do.

A frontier AI model was pulled by export controls, then restored only after its maker gave the US government early access to test future models. What owners should plan for.

xAI's Voice Agent Builder spins up a production phone line and clones a brand voice from two minutes of audio, for five cents a minute. What owners must govern now.

A US Supreme Court ruling on the FTC has knocked the legal footing out from under the EU-US Data Privacy Framework. What owners on US cloud should do now.

Germany's BSI issued a formal warning that AI now finds and weaponizes software flaws faster than defenders can patch. What owners should do about their attack surface.

A Munich court ruled AI-generated summaries are the operator's own content, making the firm directly liable for false statements. What owners should weigh now.

A US executive order sets post-quantum deadlines to 2030 that cascade onto federal suppliers. What harvest-now-decrypt-later means for owners.

The EuGH ruled on 18 June 2026 that courts may admit personal data obtained in breach of the GDPR. What owners and family offices should reconsider now.

From 11 September 2026 the EU Cyber Resilience Act forces a 24-hour vulnerability report to ENISA - and it covers products you already sold. What owners should check now.

The EU proposed the Cloud and AI Development Act on 3 June 2026. Four assurance levels turn cloud sovereignty into a procurement gate. What owners should check.
Page 30 / 36
One considered note on infrastructure, governance, and measurement, most mornings. No theory.