COGNOSCERE Daily Tech Review — Issue T115 · Thursday, May 14, 2026

Or visit Intelligence Overview for deeper analysis.

ACTCheckmarx Jenkins AST Plugin Compromised in Ongoing TeamPCP Supply Chain Attack

Threat actor TeamPCP backdoored the official Checkmarx Jenkins AST plugin (version 2026.5.09, CVE-2026-33634, CVSS 9.4) by exploiting credentials stolen in the earlier March 2026 Trivy scanner compromise, deploying an infostealer that harvested GitHub tokens, AWS/GCP/Azure credentials, Kubernetes configs, SSH keys, and Docker credentials from CI/CD runner environments. Organizations that pulled the plugin between May 9 01:25 UTC and May 10 08:47 UTC should treat their environments as compromised and rotate all secrets immediately.

BleepingComputer · Cybersecurity · Relevance: 1.0 · Source →

supply chain attack, CI/CD security, credential theft, Jenkins, DevSecOps, infostealer, pipeline compromise

PREPAREOpenAI Launches Daybreak Cybersecurity Initiative to Compete with Anthropic's Mythos

OpenAI launched Daybreak, a publicly available AI-powered cybersecurity platform built on GPT-5.5 models and Codex Security that automates threat modeling, secure code review, patch validation, and dependency risk analysis. The initiative partners with Cloudflare, Cisco, CrowdStrike, Oracle, and Zscaler and is positioned as a direct competitive response to Anthropic's restricted Mythos cyber model.

Cybersecurity Dive · Cybersecurity · Relevance: 0.9 · Source →

AI cybersecurity, vulnerability detection, defensive AI, enterprise security, DevSecOps, patch management

WATCHExaforce Raises $125M Series B for AI-Native Security Operations Platform

Exaforce, an agentic security operations startup, closed a $125M Series B at a $725M valuation with participation from HarbourVest, Khosla Ventures, and Peak XV, bringing total funding to $200M. The company's platform continuously contextualizes security telemetry via a real-time knowledge graph before incidents occur, enabling sub-minute investigation times, and plans global expansion into Japan and Europe.

TechCrunch · Cybersecurity · Relevance: 0.9 · Source →

AI SOC, security operations, funding round, agentic security, threat detection, Series B

WATCHU.S. Bank Expands AWS Partnership to Migrate Hundreds of Mission-Critical Applications for AI Transformation

U.S. Bank, the fifth-largest U.S. commercial bank, announced a multi-year agreement to migrate hundreds of mission-critical applications to AWS, covering payment processing, wealth management, and commercial banking operations, with Amazon Bedrock and Nova Sonic powering generative AI for fraud detection, compliance automation, and agentic self-service across voice, chat, and SMS channels. The deal represents one of the largest banking modernization initiatives in the financial services industry.

Banking Dive · Cloud Computing · Relevance: 0.9 · Source →

cloud migration, financial services, AI infrastructure, banking modernization, generative AI, agentic AI

WATCHGitLab Announces Global Restructuring and Layoffs to Pivot Toward Agentic AI Era

GitLab announced a workforce reduction of approximately 7%, a 30% reduction in its country footprint, and a reorganization of R&D into 60 autonomous teams in a restructuring it calls GitLab Act 2, aimed at the agentic software development era. CEO Bill Staples said the company will rewire internal processes with AI agents and reinvest the majority of savings into its Duo Agent Platform; shares fell 8% in after-hours trading.

The Register · Enterprise Software and SaaS · Relevance: 0.8 · Source →

layoffs, DevSecOps, agentic AI, enterprise restructuring, software development, CI/CD, workforce reduction

WATCHGoogle and SpaceX in Talks to Launch Orbital AI Data Centers

Google is in talks with SpaceX to secure rocket launch capacity for its Project Suncatcher orbital data center initiative, targeting prototype satellite launches by 2027. Anthropic also finalized a compute deal with SpaceX last week, while SpaceX has filed for approval for up to 1 million satellites, making orbital compute a central element of its pre-IPO investor pitch.

Wall Street Journal · Data Infrastructure · Relevance: 0.8 · Source →

orbital compute, AI infrastructure, data centers, cloud infrastructure, SpaceX, Google Cloud

WATCHGoogle Unveils Googlebook: AI-Native Laptops Built on Android with Gemini Intelligence at Core

At The Android Show: I/O Edition, Google previewed Googlebooks — a new premium laptop category built on a combined Android/ChromeOS platform with Gemini AI integrated at the OS level, replacing the Chromebook lineup. Launching this fall through OEM partners Acer, Asus, Dell, HP, and Lenovo, the devices feature a Gemini-powered Magic Pointer cursor, Android app compatibility, and cross-device integration with Android phones.

TechCrunch · Enterprise Software and Hardware · Relevance: 0.8 · Source →

AI hardware, enterprise endpoints, Gemini, Android, ChromeOS successor, laptop, Google I/O

PREPAREOpenAI Forms Enterprise Deployment Company and Acquires AI Consulting Firm Tomoro

OpenAI announced the OpenAI Development Company, a partnership with 19 investment and consultancy firms including Bain, Goldman Sachs, and SoftBank, alongside the acquisition of UK-based AI consulting firm Tomoro bringing ~150 forward-deployed engineers. OpenAI CRO Denise Dresser stated that enterprise now represents over 40% of OpenAI's revenue and is expected to reach parity with consumer revenue by end of 2026.

CNBC · Enterprise AI Adoption · Relevance: 0.9 · Source →

enterprise AI, AI consulting, acquisition, deployment, OpenAI strategy, forward-deployed engineers

PREPAREWho's Winning Enterprise AI Now: Claude Up 128%, Gemini Up 48%, OpenAI Down 8%

Enterprise AI adoption data shows OpenAI's share has declined from 62% to 56% over the past 12 months while Anthropic's Claude more than doubled its enterprise share and Gemini grew from 27% to 40%, with the lead compressed from 41 percentage points to 8 points. The coding assistant market is identified as the primary driver, with multi-model enterprise deployments now standard.

SaaStr · Business Intelligence and Analytics · Relevance: 0.9 · Source →

enterprise AI, market share, AI adoption, competitive intelligence, Claude, Gemini, OpenAI, procurement strategy

PREPAREHow AI Changes Software P&L: Why AI-Native SaaS May Cap at 17% Gross Margins

Analysis from TLDR Founders details how AI-native software economics diverge sharply from traditional SaaS: each AI call is personalized so caching and multi-tenancy provide minimal cost relief, reasoning models burn 10-100x more tokens than predecessors, and cost-per-task barely improves even as per-token prices fall — resulting in potential gross margins of 17% versus the 70%+ typical of traditional SaaS. The piece identifies four viable paths: ultra-low-cost clones, niche/lifestyle businesses, luxury software, or vertical integration into atoms or services.

TLDR Founders · Strategic Planning Tools · Relevance: 0.8 · Source →

SaaS economics, AI P&L, gross margins, AI-native software, enterprise strategy, unit economics, pricing strategy

PREPAREAI Metrics Gaming Emerges as Enterprise Problem at Amazon, Meta, and Microsoft

Employees at Amazon, Meta, and Microsoft have reportedly engaged in token usage gaming — artificially inflating AI tool consumption on internal leaderboards — as organizations track AI adoption by activity metrics rather than productivity outcomes. The behavior, dubbed 'tokenmaxxing' at Amazon, highlights a systemic governance gap in enterprise AI measurement frameworks.

Tom's Hardware · Decision Frameworks and Risk Assessment · Relevance: 0.8 · Source →

AI governance, enterprise AI adoption, measurement, gaming metrics, AI productivity, organizational behavior, decision support