AGP Executive Report

Cybersecurity & Policy: Europe rolled out an AI-and-cybersecurity action plan, pushing tougher evaluation and testing for advanced AI before market entry, while CISA also announced a new advisory body to strengthen federal cybersecurity efforts. Major Outage Watch: Australia’s Telstra outage was traced to a software defect affecting network timing, disrupting transport, emergency services and triple-zero calls, with regulators demanding transparency. India Digital Governance: MeitY will review concerns about Instagram data scraping after receiving responses to its notices, weighing the issue against the legal framework. Banking Tech: Bank of Sydney went live on Infosys Finacle’s digital banking suite on AWS, continuing the shift from legacy infrastructure to cloud-based services. AI in Consumer Apps: Google launched an AI-powered Video Remix tool in Google Photos using Gemini Omni for quick video transformations. Workforce & IT: North Carolina’s budget approved major cybersecurity and data-management funding, while UCLA cut 27 roles in its digital and technology services via a “One IT” consolidation plan. Security Threats: Fortra reported BEC attacks rose 22% in June, with gift cards the top cash-out method.

AI Governance & Security: Anthropic pushed back after China warned Claude Code has “backdoor” risks, saying affected versions should be uninstalled or upgraded, as the dispute highlights how agentic coding tools are becoming a cross-border cybersecurity flashpoint. Privacy by Design: Meta says a mandatory firmware update will keep the recording light on its smart glasses active and disable the camera if tampering is detected, aiming to curb covert filming. Enterprise Identity for Agents: Entrust CEO Tony Ball argues AI agents need governance like identities—permissions, accountability, and guardrails—so they can’t run “unguarded” in business workflows. Agentic AI in Consumer Apps: WhatsApp rolled out an AI assistant for businesses in India plus a Meta Business Agent platform for enterprises, including chat summaries, lead qualification, and handoff to humans. Cloud/AI Cost Pressure: Microsoft is routing more Excel and Outlook prompts to its own MAI models to cut reliance on OpenAI and Anthropic, signaling a production-scale shift toward in-house AI. Cyber Operations & Policy: North Carolina’s CISO says the key question for new cyber tools is simply “what problem are we trying to solve,” while the EU advances AI cybersecurity action plans. Tech in the Real World: Surgeons used teleoperated humanoid robots for live surgery, pointing to more accessible robotic care in remote settings. Outages & Reliability: Telstra blamed a software defect for a major outage that disrupted mobiles, trains, and emergency calls. Robotics Industry Momentum: China expects humanoid robot output to top 100,000 units in 2026, as AI applications keep expanding in industrial settings. Gaming/Workforce Shock: Microsoft’s Xbox layoffs hit id Software hard, with WARN notices indicating 136 roles cut.

EU Cybersecurity & AI Preparedness: The European Commission unveiled an action plan to tackle AI-driven cyber risks in energy, health, finance and public services, aiming to pair advanced model scrutiny with stronger resilience and faster cyber defence. Telco Outage Fallout: Australia’s Telstra blamed a software defect that reset network time servers via a GPS node, triggering nationwide mobile and data disruption and hundreds of “triple-zero” welfare checks. Privacy & Security: A UK privacy warning highlights how Windows’ Global Device Identifier can link activity to a specific machine even when VPNs are used, complicating anonymity for firms under threat. AI in the Wild: Germany’s AfD reportedly built an AI suite to generate “rage bait” posts in minutes, raising concerns about automated political manipulation. AI Governance Pressure: China flagged “backdoor” risk in Anthropic’s Claude Code versions, urging upgrades and tighter controls on development tool connections. Enterprise AI Tools: Presenti launched on-premises and private-cloud deployment for its AI presentation software, targeting regulated orgs that can’t send content to third-party clouds. EV Cybersecurity: India told automakers to audit EV and connected-car cybersecurity after concerns about apps misused to remotely disable vehicles. Crypto Network Update: XRP Ledger’s v3.2.0 upgrade is gaining adoption, but broader node rollout and security-fix voting are still in progress.

Cybersecurity & Policy: CISA’s long-awaited cyber incident reporting rules are expected to be finalized in September, with covered critical infrastructure firms facing 72-hour incident reporting and 24-hour ransomware payment reporting. AI Safety & Enforcement: Meta says it is strengthening child-safety systems after a government notice over alleged Instagram ads, citing AI detection and large-scale removals. Identity & Account Security: The University of Virginia deactivated alumni Gmail accounts, saying legacy Google access is costly and increases phishing risk. Access Control M&A: Barracuda acquired Evo Security to consolidate managed service provider access management for apps, including MFA and single sign-on. Enterprise Software & Data Platforms: Momentic improved high-scale caching by migrating from PostgreSQL to ClickHouse, cutting latency while handling massive query volumes. AI-Driven Attacks: A security firm describes what it calls the first ransomware operation run end to end by an autonomous AI agent. Regulation & Platforms: Nigeria’s government directed agencies to postpone new internet platform rules pending a harmonized policy framework. Tech in the Real World: ChargePoint will add 200+ EV charging ports across the Southeast via a new partnership. Cloud/AI Hardware: OpenAI unveiled its first branded developer hardware, the Codex Micro, a programmable macro pad for Codex workflows.

Payments & Digital Trade: India’s UPI is set to integrate with Indonesia’s payment system, aiming to simplify cross-border retail payments for tourists and businesses. Data Infrastructure: Cyprus telecom Cyta is buying and expanding the RedMax Data Centre, targeting early-2027 commercial operations and a major boost to cloud and colocation capacity. IT/OT Convergence: Schneider Electric will acquire Cognite in a $3.1B deal to add industrial data and AI software for connecting operational tech with enterprise systems. Enterprise Workflow Digitization: Procede Software launched Document Sign inside its Excede dealer management platform to replace paper approvals with embedded digital signing. Cybersecurity & Software Supply Chain: CISA is using Anthropic’s Mythos to scan government code for security flaws, while CERT-In warns of malware delivered via malicious VBScript attachments. Major Vulnerability Push: Adobe urged ColdFusion users to patch immediately after maximum-severity flaws were reported as exploited. AI Security Governance: Australia is expanding AI safety testing after findings that models can make harmful decisions without guardrails. Regulation & Platform Oversight: Nigeria directed regulators to maintain the current approach on internet platform rules while building a harmonised policy framework. Security Incident Watch: FortiBleed-linked reports say UK government and Foreign Office login credentials are being sold on the dark web. App Ecosystem Crackdown: India’s MeitY ordered removal/unblocking actions tied to e-rickshaw “kill switch” battery apps and related platform compliance. Industry Tech Jobs: Tech layoffs topped 119,000 in the first half of 2026, with Microsoft cutting 4,800 jobs in Xbox-related restructuring.

Cybersecurity & Government AI: CISA has gained full access to Anthropic’s Mythos to audit government code, reportedly finding vulnerabilities in hours rather than weeks. Spyware Oversight: The European Parliament voted to debate spyware after Amnesty and Citizen Lab-linked reporting that Pegasus repeatedly hacked an EU lawmaker’s iPhone. App Store Rules for Minors: The U.S. Supreme Court let Texas enforce age verification and parental-consent requirements for minors downloading apps. Connected Healthcare Risk: A cybersecurity warning highlights how attacks on connected medical devices can disrupt records, labs, and care delivery. Training Pipeline: The U.S. Department of Defense opened applications for its Cyber RAP paid apprenticeship to build civilian cyber talent. E-Rickshaw “Kill Switch” Crackdown: India ordered Apple and Google to remove apps tied to remotely disabling e-rickshaws, tightening scrutiny on battery management software. Market & Tech Policy: Dell shares jumped after Trump urged Americans to “buy a Dell computer,” while Microsoft cut about 4,800 jobs in Xbox restructuring. Local Incident Watch: Pennington County is responding to an ongoing cybersecurity incident with some offices closed.

Cybersecurity Supply-Chain: The FBI says TeamPCP tampered with trusted developer/security tools (including Trivy, KICS, LiteLLM and a Telnyx SDK) to deliver credential-stealing malware and backdoors. Deepfake Crime Law: Bahrain lawmakers are pushing to make deepfake creation and misuse a clear criminal offence under an update to its IT crimes rules. AI Governance & Platforms: India’s Delhi High Court fight continues as Google argues it can’t be forced to proactively monitor YouTube or stop re-uploads of court videos. Messaging & Piracy Enforcement: India’s MIB ordered Telegram to detect, disable and remove pirated content and prevent repeat uploads within 15 days. EV “Kill Switch” App Crackdown: India moved to remove apps tied to remotely disabling e-rickshaw batteries after viral incidents, with regulators directing app stores to tighten checks. Cloud/AI Infrastructure: Zoho says it built its own data centers and servers to control costs and data sovereignty, including AI-focused hardware. Industry Tech Push: Synopsys launched an electronics digital twin platform to speed physical AI and software-defined product validation. Digital Skills & Education: Jordan’s education ministry is studying facial recognition for attendance, while IIT Madras and IIT Kanpur expand cybersecurity training.

Semiconductor Push: Gujarat plans a Rs 190 crore SAMARTH hub at IIT Gandhinagar to boost India’s chip research and workforce pipeline. Cloud Security Training: Kuwait’s National Cybersecurity Center launched a “Cloud Cybersecurity” project to train government cadres through hands-on tracks until November. AI Governance Pressure: Saudi Arabia joins the UN AI governance dialogue in Geneva, signaling more global rule-making momentum. AI Cost-Cutting Tactic: Companies are reportedly using a “Caveman” style plugin to make AI responses shorter and cut token spend. Cyber Breach Watch: Medtronic is notifying 3.8M people after a ShinyHunters attack exposed personal and medical data. Regulatory Crackdown on Social Ads: India ordered Meta to remove Instagram ads linked to child sexual abuse material and demanded safeguards within seven days. E-Rickshaw App Shutdowns: India also moved to remove apps accused of remotely disabling e-rickshaw batteries, tightening platform controls. Data Center Backlash: Kyoto residents are uneasy as NTT DATA expands data center capacity for AI-driven demand. F1 Software Glitch: The British GP ended behind a safety car after an FIA “software error” sent the wrong message, sparking crowd boos.

Meta Crackdown on Child Safety Ads: India’s MeitY has ordered Instagram/Meta to disable paid ads and content promoting or facilitating child sexual exploitative and abuse material, demanding a detailed response within 7 days and warning of possible legal action if safeguards fail. EV Cybersecurity Push: India also moved to remove Chinese battery-management apps tied to viral “remote shutdown” e-rickshaw incidents, directing app stores to tighten checks after safety concerns and alleged Bluetooth misuse. AI in the Spotlight: Zhipu AI released open-weight GLM-5.2 and a coding assistant, while Hong Kong’s HKMA chief warned of AI bubble risks and quantum threats to encrypted finance. Enterprise Software Pricing & Competition: Zoho co-founder claimed a customer used competitive pressure to cut Microsoft Office renewal costs by nearly 90%, reigniting debate over software licensing power. Digital Skills & Policy: India is drafting cybersecurity rules for Level 3+ connected vehicles, aiming to curb attacks as cars get more software-defined. STEM Education Drive: Qatar plans four new STEM secondary schools to boost science and tech graduates, including future cybersecurity and AI talent. Regional Tech & Investment: Marcos’ Canada visit highlighted $2.5B in commitments including IT-BPM, while Turkey and Pakistan pushed to translate political ties into deeper trade and technology cooperation.

AI & Privacy Backlash: Meta says owners of its smart glasses will need a $19.99/month Meta One Premium subscription to unlock key AI features, with usage limits even for subscribers—adding a new paywall to a device already under privacy scrutiny. Cybersecurity & Governance: India’s Centre directed Telegram to curb piracy and file an action report within 15 days, warning that platform inaction may fail due-diligence expectations under IT rules. Critical Infrastructure Security: India also ordered app-store removals of “kill switch” style battery management apps after viral reports of e-rickshaws being remotely disabled, pushing tighter checks on mobile apps used in vehicles. Digital Economy & Trade: Türkiye and Pakistan pledged to lift bilateral trade to $5B and expand cooperation in energy, transport, critical minerals, and information technologies, including plans for special economic zones. Tech Policy & Education: A school committee debated a Doorman app that can disable student phones during class, raising concerns about privacy, compliance, and operational impact. Semiconductors: CG Semi began commercial production at its G1 OSAT facility in Gujarat, targeting global customers and scaling India’s chip supply chain.

Automotive Cybersecurity Crackdown: India’s MeitY has ordered app stores to block several battery-management apps after viral “kill switch” videos showed e-rickshaws being remotely disabled, pushing the country to treat vehicle software and connected interfaces as a security priority. Platform Accountability for Piracy: India’s I&B Ministry has issued Telegram a 15-day notice to curb widespread pirated films and OTT content, demanding an Action Taken Report and stronger detection/removal steps instead of one-by-one takedowns. Messaging App Scrutiny: MeitY is also questioning the “username” feature on Telegram and Signal and previously WhatsApp, warning it could enable impersonation and scams. AI Security Updates: ChatGPT added pronunciation guidance for 60+ languages, while Anthropic detailed Claude Fable 5’s cybersecurity safeguards and jailbreak handling. Cybersecurity Education Push: IIT Madras and IIT Kanpur launched India’s first practice-oriented Bachelor of Cybersecurity with two years of field deployment. Regional Cyber Defense: The UAE Cybersecurity Council said its national system thwarted AI-enabled attacks targeting the financial sector.

Cybersecurity & Privacy: Singapore’s Land Authority says ~70,000 people’s personal data was exposed in an IBM-managed cloud testing environment, with names, ID numbers and addresses included in a dataset meant to be anonymised. App-Security Crackdown: India’s MeitY ordered removal of Chinese battery-management apps (BAT-BMS, Lossigy, Epoch-i-ion) after viral reports they could remotely disable e-rickshaws, and warned app stores to tighten due diligence. Platform Accountability: India also moved to summon Meta over Instagram ads allegedly linked to child sexual abuse, seeking details on moderation and ad review safeguards. AI Infrastructure Economics: OpenAI engineers reportedly cut ChatGPT inference costs by more than half using internal software optimisation, reducing GPU demand for guest traffic. Software-Defined Defense: The Netherlands will invest €30M with Intelic to build a software-first interoperability foundation for a national UAV ecosystem. Enterprise/Cloud Security: A US government cybersecurity breach was reported, while IBM-linked incidents also surfaced in the week’s coverage. Semiconductor Skills: IIT Gandhinagar launched SAMARTH, a Rs 190 crore hub to train and research advanced semiconductor manufacturing.

Connected Mobility Security: India’s MeitY ordered app-store removals of BAT-BMS and other BAT-BMS-linked apps after viral videos claimed Bluetooth-enabled battery packs could be remotely disabled, prompting safety fears and calls for tighter app-store due diligence. Messaging Identity Crackdown: India also pressed WhatsApp for an explanation over username features, citing fraud and impersonation risks, while regulators probe similar username rollouts across platforms. Cyber Supply-Chain Threats: The FBI warned TeamPCP is trojanizing software updates to steal cloud tokens, SSH keys, and Kubernetes secrets from CI/CD environments, targeting tools like Trivy and KICS. US Government Breach: DHS confirmed a cyber incident involving a sensitive legacy information-sharing environment (HSIN), raising national-security concerns. AI Governance & Policy: Indonesia lawmakers began deliberating a cybersecurity and cyber resilience bill, aiming to formalize protections for critical infrastructure and AI-enabled governance. AI Industry Shift: Big tech is sending thousands of engineers into customer offices to build AI systems on-site, signaling a move beyond selling software alone. Enterprise AI Tools: Nutanix launched Agent Gateway to govern AI agents, adding controls as agentic deployments expand.

AI & Enterprise Cost Cuts: SAP is slowing hiring and pausing travel as it pours more money into AI product development, signaling how software giants are reshaping budgets around automation. Cybersecurity & Digital Governance: India’s government has ordered WhatsApp to pause its username rollout over fraud and impersonation fears, and it has now sent notices to Telegram and Signal too, widening scrutiny across messaging apps. Legal Tech & Privacy: A U.S. federal judge denied class certification in a CIPA internet-tracking lawsuit, keeping the fight over consent and third-party tracking tech alive. Court Digitization: Nigeria’s Supreme Court unveiled a case management system and electronic filing platform to modernize registry operations and speed up access to justice. FTC Consumer Protection: Hopper will pay $35M to settle FTC claims about hidden, pre-selected fees and misleading pricing in its travel apps. Industry Automation: Productive Robotics is showcasing “zero programming” collaborative automation for machining and sawing at IMTS, aiming to reduce labor bottlenecks. Public Sector IT: Ethiopia is expanding digitally monitored wildlife protection to boost conservation and tourism planning using a new protected-areas platform.

AI Governance & Enterprise Software: BearingPoint is launching the BearingPoint Store, an outcome-based marketplace aimed at scaling AI agents beyond pilots, while Gartner warns many agentic AI projects face cancellation without stronger risk controls. Cybersecurity in Healthcare: CISA flagged vulnerabilities in OFFIS DCMTK, a DICOM medical imaging toolkit, warning attackers could write files, steal data, or crash systems. Messaging Security & Fraud: India asked Meta to pause WhatsApp username rollout over impersonation and phishing fears, as regulators demand safeguards. Legal Limits on Website Blocking: Kenya’s High Court struck down parts of its cybercrime law that let a state committee order website blocks without court approval. Identity & Passwordless Push: BIO-key will showcase passwordless biometric IAM at a Jordan banking cybersecurity workshop. Mobile Connectivity at Scale: BT Business and Ivanti unveiled remote eSIM installation via MDM for managed Android devices. Hardware & Quantum Momentum: IBM confirmed a quantum computer for Amaravati by September 2026, and researchers reported longer-lived quantum magnons that could enable ultra-compact quantum devices. Consumer Tech: Netflix expands kids programming with a baking/crafting competition series tied to “Gabby’s Dollhouse.”

WhatsApp Under Scrutiny: India has asked Meta to pause WhatsApp’s new username feature, warning it could fuel impersonation, phishing, “digital arrest” scams, and other online fraud, and demanding a response within three days. Cloud Networking Growth: Dell’Oro says AI cybersecurity concerns and a shift toward AI use cases will accelerate Public Cloud-managed LAN revenue growth from 2026–2030. AI Model Export Update: The Trump administration lifted export controls on Anthropic’s Claude Fable 5 and Claude Mythos 5 after Anthropic pledged stronger safeguards and closer government coordination. Cybercrime Case: A suspected Scattered Spider member was extradited from Finland to the U.S. and charged in federal court over alleged hacking and ransomware-related activity. Cyber-Physical Risk: A U.S. summit highlighted how cyber threats increasingly endanger critical infrastructure and public safety, pushing security beyond IT into operational governance. Enterprise Software Dealmaking: Lumine Group completed acquisitions tied to video processing and monetization, expanding its media software footprint. Repair Rights Push: Independent repair shops renewed calls for stronger “right to repair” rules for electronics.