Leadership & Executive
The Board Room
Microsoft's Copilot borrows your permissions while Google's Gemini agent holds its own.
The design choice looks academic until an agent misbehaves. Then it decides what you revoke: one person's entire access, or a separate credential reaching into Workspace, Microsoft 365, Slack and Jira. Neither option is clean, and the tradeoff matters less than it should, because 69% of IT teams cannot roll back a bad change within an hour.
In Play
Security Controls Become the Way In
Run an assume-breach review of every FortiGate you operate this week. The parts of your stack you must control or physically secure are now more contested than the parts you can download, and security controls have become the way in. The FBI says attackers in the FortiBleed campaign can lock organizations out of their own FortiGate firewalls and keep persistent access to compromised devices, per CSO. If your perimeter runs on FortiGate, a patched device is not proof of a clean one. The Hacker News separately reports active exploitation of a CVSS 10.0 flaw in the Bricksforge WordPress plugin, and 135 exploitation attempts against SonicWall SMA 1000 after its patch shipped.
Ask ClarityAI Agents Become Principals
Google's enterprise Gemini agent can hold its own workplace identity, email address and audit trail, per TLDR IT, and xAI gave every Grok Bot an inbox at mail.grokbot.com, per Simplifying AI. Your identity systems were built for people and service accounts, not for software that signs up for services and emails vendors. Fleet's survey, reported by TLDR IT, found 86% of IT teams let AI-generated changes into production, while 69% cannot roll one back within an hour.
Ask ClarityMeta's Best Model Stays In-House
Meta's Muse Wonder Full scored 56 on Artificial Analysis' index against Claude Opus 5.5's 58, but Meta keeps it inside Muse Code; the API version scores 52 at $4.52 per task, per AI Breakfast. A lab that withholds its best model from its own API competes with you at the application layer. Buyers are also moving down-market: The Information reports the 10 highest-quality models handled 14% of OpenRouter usage in Q3 2026, versus 55% in Q1 2025.
Ask ClarityAI Capacity Rationed by Power and Optics
Lumentum says its optical components are 'completely sold out' through early 2029, and Bloomberg reports power is now the biggest roadblock to AI data center construction, with Oracle trucking in gas to keep projects on schedule. Your capacity plans are only as firm as the energized megawatts and component allocations behind them. Capital is more selective than demand: Firmus's record-setting Australian IPO became a flop within about 48 hours, per Bloomberg.
Ask ClarityBond Market Tests the AI Rally
The 10-year Treasury yield sits at 5.244%, up 108.1 basis points this year, while the Nasdaq is up 17.74%, per Morning Brew. September CPI prints Wednesday and is expected to be the hottest in five months, driven by diesel at $6.28 a gallon. A hot print raises your cost of capital while exits are already scarce: PitchBook data in Fortune's Term Sheet shows U.S. private equity exit value down 14.1% in Q3.
Ask Clarity
Deep Dives
- ●
FortiBleed and CYPFER: The Defenders You Trust Are the Way In
These cases put attackers inside firewalls, contractor platforms and allegedly even a breach-response firm.
Start with how much the evidence can bear, because that shapes the response. CSO's FortiBleed coverage is headline-level. It relays the FBI's findings without affected versions or exploit mechanics. What it does report is serious: investigators who reached the campaign's…
3 action items
- ●
Agents Now Hold Identities, and Three Platforms Want to Control Them
Whoever supplies agent identity and revocation will set the enterprise default, and the vendors racing for that role are the same ones whose agent controls keep failing.
The two identity launches use opposite governance models. Microsoft's Copilot, which can now organize files, change settings and run tasks on Windows PCs, acts as the user and inherits that user's permissions. Google's Gemini agent is an independent principal :…
3 action items
- ●
Microsoft's Maia and Sold-Out Optics Mean You Rent Compute on Others' Terms
Demand is not what limits AI capacity, so any plan that lacks a power date, a component allocation and a funding path is an option rather than an asset.
The constraint stack has layers, and each has a different owner. At the chip layer, Microsoft's Maia 300 is the clearest sign that the largest buyers are bending their own cost curves. Microsoft calls it its 'primary AI inference system',…
2 action items
The edition continues
Take the signal into the room.
Sign up or log in to read all 3 deep dives in full, plus the final take.
Read the full editionContinue with LinkedIn