COGNOSCERE Daily Tech Review — Issue T116 · Friday, May 15, 2026

Or visit Intelligence Overview for deeper analysis.

ACTOfficial Checkmarx Jenkins Package Compromised with Infostealer (CVE-2026-33634, CVSS 9.4)

Threat group TeamPCP backdoored version 2026.5.09 of the Checkmarx Jenkins AST plugin, publishing it to the official Jenkins Marketplace with a CVSS 9.4-rated credential-stealing payload targeting GitHub tokens, AWS/GCP/Azure credentials, Kubernetes configs, and SSH keys. This is the second Checkmarx compromise by TeamPCP in six weeks, with the attack chaining credentials stolen from Trivy in March, and organizations running the affected version must immediately downgrade and rotate all secrets.

The Hacker News · Cybersecurity – Supply Chain Attack · Relevance: 0.9 · Source →

supply-chain-attack, CI-CD-security, credential-theft, DevSecOps, Jenkins, infostealer, CVSS-critical

ACTFoxconn Confirms Cyberattack Claimed by Nitrogen Ransomware Gang

Foxconn confirmed that North American factories were hit by a cyberattack claimed by the Nitrogen ransomware gang, which alleges it stole 8 TB of data comprising more than 11 million files, including confidential documentation from Apple, Dell, Google, Intel, and Nvidia. Nitrogen is a double-extortion group that encrypts and exfiltrates data simultaneously, and a known flaw in its decryptor makes ransom payment likely futile.

TechCrunch · Cybersecurity Incidents · Relevance: 0.9 · Source →

ransomware, supply-chain-attack, data-breach, double-extortion, manufacturing-sector, North-America

ACTMicrosoft May 2026 Patch Tuesday Fixes 120 Flaws Including 29 Critical RCE Vulnerabilities

Microsoft's May 2026 Patch Tuesday addresses 120 vulnerabilities across Windows, Office, Azure, and Microsoft 365 — including 29 critical remote code execution flaws and spoofing/bypass issues in M365 Copilot for Desktop, GitHub Copilot, and Azure Machine Learning notebooks. The bulletin flags AI-connected developer tooling as an expanding enterprise attack surface, with prioritized patching urged for internet-facing SharePoint, Dynamics 365, and Windows DNS Client.

Cybersecurity News · Cybersecurity – Patch Management · Relevance: 0.9 · Source →

patch-tuesday, vulnerability-management, RCE, enterprise-security, cloud-security, AI-attack-surface

PREPAREOpenAI Launches Daybreak for AI-Powered Vulnerability Detection and Patch Validation

OpenAI launched Daybreak, an AI-powered cybersecurity initiative combining GPT-5.5 models and Codex Security to help enterprises identify vulnerabilities, generate threat models, test fixes in isolated environments, and accelerate patch validation — with major partners including Cisco, Cloudflare, CrowdStrike, Oracle, and Zscaler. Unlike Anthropic's Mythos, Daybreak is publicly requestable via OpenAI's website, positioning it as a broadly accessible defensive platform competing directly in the enterprise security market.

The Hacker News · Cybersecurity – AI-Powered Defense · Relevance: 0.9 · Source →

AI-cybersecurity, vulnerability-management, agentic-security, enterprise-security, OpenAI, DevSecOps

WATCHGoogle Announces Googlebooks and Gemini Intelligence Platform at Android Show

Google unveiled Googlebooks, a new category of Gemini-native laptops built in partnership with Acer, Asus, Dell, HP, and Lenovo, launching this fall with a Magic Pointer AI cursor, Android phone integration, and generative widget creation. Separately, Gemini Intelligence was announced as Google's cross-device AI platform capable of executing agentic tasks within apps, browsing the web, and carrying on-screen context — previewing significantly broader capabilities ahead of Google I/O next week.

TechCrunch · Enterprise Endpoint / AI-Native Hardware · Relevance: 0.8 · Source →

AI-hardware, endpoint-computing, Gemini, Android, cross-device-AI, enterprise-devices

WATCHGitLab Restructures for the Agentic Era, Flattens Org and Embeds AI Agents in Internal Workflows

GitLab announced a restructuring tied to its agentic AI strategy, including flattening parts of the organization, reorganizing R&D into approximately 60 smaller teams, and embedding AI agents into internal reviews, approvals, and handoffs. CEO Bill Staples framed the shift around software increasingly being built by machines and directed by humans, with humans retaining ownership of architecture, judgment, and customer relationships.

Business Insider · Enterprise Software / Organizational Change · Relevance: 0.8 · Source →

agentic-AI, organizational-restructuring, enterprise-software, AI-transformation, DevOps, workforce

PREPAREAnthropic Beats OpenAI on Business AI Adoption for First Time, Ramp AI Index Shows

Ramp's May 2026 AI Index, tracking corporate spend across 50,000-plus U.S. businesses, shows Anthropic surpassing OpenAI in paid business adoption for the first time at 34.4% versus 32.3%, driven almost entirely by Claude Code expanding from technical teams into finance, legal, and research workflows. Ramp's own economist simultaneously flagged three risks to Anthropic's lead: misaligned token-pricing incentives, recent reliability outages, and rising open-source inference competition.

Axios · Enterprise AI Adoption · Relevance: 0.9 · Source →

enterprise-AI, market-share, Claude, ChatGPT, AI-adoption, AI-spend, agentic-coding

WATCHCerebras Raises $5.55 Billion in Year's Largest IPO, Stock Surges Over 68% on Nasdaq Debut

AI chipmaker Cerebras Systems priced its IPO at $185 per share on May 14, raising $5.55 billion in 2026's largest public offering, with shares surging more than 68% on the Nasdaq debut to close above $311 and a market cap exceeding $60 billion. Cerebras reported $510 million in 2025 revenue (up 76% year-over-year) and holds a multi-year $20 billion computing agreement with OpenAI, with AWS as its first hyperscaler data center deployment.

TechCrunch · AI Infrastructure / Semiconductor · Relevance: 0.9 · Source →

IPO, AI-chips, semiconductor, AI-infrastructure, AI-compute, capital-markets

WATCHAnthropic Launches Claude for Small Business with QuickBooks, HubSpot, and Microsoft 365 Integrations

Anthropic launched Claude for Small Business, a curated package of connectors and pre-built workflows embedding Claude into common SMB tools including QuickBooks, PayPal, HubSpot, Google Workspace, and Microsoft 365, extending its enterprise momentum into the broader business market. The launch follows the company's surge to the top of Ramp's enterprise adoption index and signals aggressive horizontal expansion across business segments.

TLDR AI · Agentic AI / Enterprise Software · Relevance: 0.8 · Source →

enterprise-AI, SMB, agentic-workflows, SaaS-integration, Claude, Anthropic

WATCHAmazon Launches Alexa for Shopping, Replacing Rufus with a Unified AI Commerce Agent

Amazon folded its standalone Rufus shopping chatbot into a new unified Alexa for Shopping agent, now integrated directly into the Amazon search bar and available across mobile, desktop, and Echo Show devices without a Prime membership. The agent draws on purchase history, product reviews, pricing data, and prior Alexa conversations to power personalized recommendations, automated price tracking, Buy for Me on third-party retailers, and recurring Auto-Buy reorders.

About Amazon · Agentic AI / Commerce · Relevance: 0.7 · Source →

agentic-AI, e-commerce, consumer-AI, voice-assistant, AI-agent, retail-tech

PREPARESAP Unveils the Autonomous Enterprise at Sapphire 2026 with Unified AI Platform and 200+ Agents

At SAP Sapphire 2026, SAP launched its Autonomous Enterprise strategy, anchored by the new SAP Business AI Platform unifying SAP BTP, Business Data Cloud, and Business AI into a single governed environment, along with Joule Studio for agent development and an Autonomous Suite deploying over 50 Joule Assistants and 200-plus specialized agents across finance, HR, supply chain, and CX. Deepened partnerships with Anthropic, AWS, Google Cloud, Microsoft, NVIDIA, and Palantir were announced alongside a €100 million partner fund.

SAP News Center · Enterprise Decision Automation / ERP AI · Relevance: 0.9 · Source →

agentic-AI, ERP, enterprise-automation, autonomous-enterprise, knowledge-graph, governance, SAP-Sapphire

PREPAREServiceNow Action Fabric Opens Full Platform to Any External AI Agent via MCP

At Knowledge 2026, ServiceNow launched Action Fabric, a headless MCP-based architecture that exposes its full library of enterprise workflows, approvals, playbooks, and business rules to any external AI agent — including Claude, Copilot, or custom agents — with full AI Control Tower governance, identity verification, and audit trails. The MCP Server is generally available today in all Now Assist and AI Native SKUs, with Anthropic's Claude Cowork as the initial launch partner.

ServiceNow Newsroom · Enterprise Workflow Orchestration / Decision Execution · Relevance: 0.9 · Source →

agentic-AI, enterprise-workflow, MCP, headless-architecture, governance, ServiceNow, AI-orchestration

WATCHRamp AI Gateway Production Index: Agentic Workloads Now Carry 59% of All Token Volume

A Vercel analysis of seven months of AI Gateway production traffic across 200,000-plus teams found that agentic workloads now carry 59% of all token volume, open-source model adoption is accelerating, and most large-scale deployments are multi-model by default. Anthropic leads in spend despite higher unit pricing, while Google leads in volume, and no single lab commands vendor loyalty at scale.

TLDR · AI Analytics / Production Metrics · Relevance: 0.8 · Source →

AI-adoption-data, agentic-AI, multi-model, AI-spend, token-economics, enterprise-AI, decision-support