This TLDR covers Accenture’s $4.2 billion cybersecurity deal to buy Dragos, runZero, and NetRise for OT security, plus the hidden risks of free VPNs and streaming apps turning into residential proxies. It also looks at Cisco’s phased move to cloud SSE, Amazon’s push against human-in-the-loop AI governance, OpenAI’s new spend controls, the launch of enterprise-managed OAuth for MCP, Microsoft’s messy AI rollout, and an internal Copilot-powered analytics agent.

• Accenture is spending $4.2B to buy Dragos, runZero, and NetRise, betting on consolidated OT security as a growth market.
• Infoblox found 65%+ of cloud customers' networks are making DNS calls to residential-proxy domains (500B+ queries/month in 2026), showing free VPNs and streaming apps are quietly turning corporate devices into proxy infrastructure.
• Amazon Security argues human-in-the-loop approval doesn't scale for AI agents and is shifting to identity-based, risk-scored permissions instead of manual checks.
• Microsoft is shipping default-on Copilot features in Windows/Office faster than IT can build governance for them, creating friction, while internal tools like Cisco's SSE migration (18% fewer tickets) and Qubot's natural-language data queries show more controlled rollouts working better.

Zscaler unveiled a zero trust platform to secure autonomous AI agents’ data access, communications and device activity. It adds an AI Broker for agent-to-agent and data calls, endpoint AI threat detection, an AI Access Graph for mapping identities and data flows, and expanded AI Protect controls. This aims to give each AI agent its own identity, permissions and real-time monitoring.

• Zscaler launched a zero trust platform giving each AI agent its own identity, permissions, and real-time monitoring, built on four pieces: an AI Broker, Endpoint AI Security, an AI Access Graph, and expanded AI Protect controls.
• Dell'Oro Group forecasts the AI systems security market will grow from near zero to $8 billion by 2030, with nearly 60 vendors already competing.
• Analysts warn agents shouldn't inherit trust just because a user launched them—without unique identities and scoped permissions, compromised or misconfigured agents could move laterally and escalate privileges in seconds.