Summary

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: The first ten lines of a command policy for AI coding agents In this Help Net Security interview, Vinay Thakker, CTO of KloudStax, explains how to set identity, credentials, and network limits for AI agents. He argues that agents should run under their own identity, with the person’s identity…

For more information, read the full story at the original source: Help Net Security ↗

Vulnerabilities in this story

• CVE-2026-109618 KEV · fix by 2026-10-29 PHP Group PHP, Siemens AMIS TS, Siemens Energy Engage EPSS 99.9% 9.2Critical
• CVE-2026-109619 KEV · fix by 2026-10-29 PHP Group PHP, Siemens AMIS TS, Siemens Energy Engage EPSS 99.9% 9.2Critical
• CVE-2026-107441 Zyxel GS1900-10HP firmware, Zyxel GS1900-16 firmware, Zyxel GS1900-24 firmware EPSS 0.2% 8.8High
• CVE-2026-7273 KEV · fix by 2026-09-24 Zyxel GS1900-10HP firmware, Zyxel GS1900-16 firmware, Zyxel GS1900-24 firmware EPSS 2.7% 8.8High
• CVE-2026-96951 KEV · fix by 2026-10-16 Microsoft Edge, Microsoft Outlook.com, Microsoft Windows 10 EPSS 9.8% 8.8High
• CVE-2026-111357 KEV · fix by 2026-11-02 Ivanti Connect Secure EPSS 0.5% 7.0High
• CVE-2026-118527 KEV · fix by 2026-11-13 Ivanti Connect Secure EPSS 0.8% 4.3Medium