Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps

microsoft.com Aug 5, 2026

Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps

Curated by Shubham · TechCapsules · Aug 5, 2026

AI-summarised brief · reviewed before publication

Microsoft is expanding its Zero Trust for AI strategy by introducing a new AI-focused Zero Trust Assessment experience and a DevSecOps pillar within the Zero Trust Workshop. These additions aim to help organizations operationalize security for AI agents, Copilots, and autonomous workflows. The Assessment provides an automated view of security posture, evaluating tenant configurations and activity signals to generate prioritized remediation recommendations. It now includes new pillars for AI, Security Operations, and Infrastructure, alongside existing Identity, Devices, Network, and Data categories. The new DevSecOps pillar offers 15 control groups and 91 tasks to apply Zero Trust principles from source code to cloud deployment. This guidance addresses risks in CI/CD pipelines, dependencies, and infrastructure-as-code. The Workshop utilizes a First, Then, Next framework to create 12- to 24-month roadmaps. These tools build upon the Zero Trust for AI strategy announced at RSA Conference 2026, moving from architectural concepts to practical implementation for security and engineering teams.

💡 Why It Matters

· By integrating specific controls for AI-assisted development, Microsoft addresses the critical gap between rapid AI adoption and secure software delivery.
· This shift forces organizations to treat AI memory and automated code generation as governed security boundaries rather than black boxes.

AI Capsules Cybersecurity Microsoft

Read full article on microsoft.com

AI Safety Evaluation Market Expansion Potential and Revenue Projection 2026 to 2035

InsightAce Analytic Pvt. Ltd. released a report projecting the global AI safety evaluation market to grow from $1.64 billion in 2025 to $20.88 billion by 2035, a compound annual growth rate of 29.1 % for 2026‑2035. The study defines AI safety evaluation as a continuous process that tests robustness, security, fairness, explainability, alignment and operational reliability throughout an AI system’s lifecycle. It outlines market segments by type (hardware and software support services), application (IT operations, supply chain, finance, sales and marketing, others), organization size, and verticals such as BFSI, telecom, media, travel and logistics. The report highlights expanding demand across both developed and emerging economies and notes the shift from a niche function for AI developers to a core enterprise capability essential for mainstream AI adoption.

💡 Enterprises now view AI safety as a non‑negotiable governance layer, making it a prerequisite for scaling AI across critical business processes.

theverge.com · Aug 5

Trump’s AI testing plan is limited and vague

The Trump administration’s voluntary framework for assessing cybersecurity risks in advanced artificial intelligence explicitly excludes open-source models from its testing protocols. According to reports from Axios, the guidelines prohibit the government from using this framework to restrict open models once they have been released to the public. This policy stems from an executive order signed by President Trump in June, which requested that AI companies share their frontier models with federal authorities before public launch to mitigate potential security threats. However, the current framework leaves significant gaps in regulatory oversight. It fails to define what constitutes a “national security risk,” creating ambiguity for compliance and enforcement. By omitting open models, which allow users to inspect core components, the administration limits the scope of its safety evaluations. Critics argue that this exclusion undermines the goal of comprehensive cybersecurity assessment. The lack of clear definitions and the narrow focus on proprietary systems raise questions about the effectiveness of the proposed measures in protecting against emerging AI-related threats in the broader technological landscape.

💡 Excluding open-source AI from safety tests creates a regulatory blind spot for the most widely accessible and potentially dangerous models. Without a clear definition of national security risks, the framework offers little practical guidance for developers or enforcement agencies.

evertiq.com · Aug 5

AI server shipments forecast raised to 31% YoY in 2026

TrendForce has revised its 2026 AI server shipment forecast upward to nearly 31% year-over-year growth, driven by surging infrastructure investments from major cloud service providers. The research firm estimates that the combined capital expenditures of nine leading CSPs, including Google, Amazon, Meta, Microsoft, Oracle, ByteDance, Tencent, Alibaba, and Baidu, will exceed USD 886.7 billion in 2026. North American hyperscalers account for nearly 90% of this spending. Demand for NVIDIA rack-scale platforms has strengthened, while Google and AWS prepare to ramp up next-generation in-house ASIC production in the second half of the year. Chinese providers are simultaneously accelerating domestic AI solution deployments. This spending supports generative AI and large-scale model requirements, encompassing GPU clusters and liquid-cooling infrastructure. Looking ahead, TrendForce projects the top nine CSPs’ combined capital expenditures will reach approximately USD 1.3 trillion in 2027, representing nearly 50% year-over-year growth, indicating sustained investment momentum despite a higher comparison baseline.

💡 The dominance of North American hyperscalers in capital expenditure underscores a widening technological gap with Chinese providers, who are forced to accelerate domestic alternatives amid supply constraints. This bifurcation in infrastructure strategy will likely fragment the global AI hardware ecosystem, creating distinct supply chains for Western and Chinese markets.

financialpost.com · Aug 5

Private Capital Rushes to Fund AI Buildout in Emerging Markets

Private capital flows into artificial intelligence projects across emerging markets reached a record $8.8 billion in the first half of 2026, surpassing the total for all of 2025. According to the Global Private Capital Association, this surge marks the highest inflow since records began in 2008. Unlike equity markets concentrated in South Korea and Taiwan, private investment is diversifying into Latin America, Africa, and Asia. Major deals include Nxtra Data Ltd. raising $1 billion and Yotta Data Services securing $2 billion for an AI hub in India. Chinese firm Moonshot AI raised over $700 million. Apollo Global Management committed up to $20 billion for infrastructure in Mexico, while Kuaishou’s Kling AI secured $2.8 billion. Jeff Schlapinski, GPCA’s managing director, noted investors recognize durable long-run opportunities outside the US, driven by persistent gaps in digital and energy infrastructure serving pent-up demand.

💡 This capital migration proves the AI infrastructure boom is no longer confined to traditional tech hubs, but is actively reshaping the economic landscape of the developing world. Investors are betting that emerging markets offer untapped growth potential by filling critical infrastructure voids that established economies have already saturated.

ww2.kqed.org · Aug 5

Our Chatbot Friends and Lovers (with Pat Pataranutaporn)

Pat Pataranutaporn, an assistant professor at the MIT Media Lab, examines the psychological dynamics of human-AI relationships in a recent discussion on the podcast Life, Automated. He argues that chatbots often exploit the human tendency to perceive agency behind screens, creating dangerous illusions of companionship. While Pew Research indicates that half of American adults use chatbots, with 4% utilizing them for romance or friendship, Pataranutaporn warns against evaluating AI solely on engagement metrics. He contends that compliant chatbots which never challenge users can undermine human flourishing. Instead, he advocates for assessing AI based on its long-term contribution to human well-being. The conversation highlights the risks of emotional reliance on algorithms that mimic empathy without genuine understanding. Pataranutaporn suggests that healthy AI integration requires recognizing these tools as computational systems rather than sentient beings. This perspective challenges current development models that prioritize user retention over psychological safety. The episode underscores the need for ethical frameworks that protect users from manipulative design patterns inherent in conversational agents.

💡 Shifting AI evaluation from engagement metrics to human flourishing challenges the fundamental business models of major tech companies. This redefinition forces a critical examination of whether current companion bots are nurturing users or exploiting their psychological vulnerabilities for profit.

windowsreport.com · Aug 5

US Reportedly Excludes Open-Weight AI Models From Cyber Tests

The Trump administration has reportedly decided to exclude open-weight AI models from a new voluntary US government program designed to test advanced systems for sophisticated cyber operations. This decision was communicated to representatives from Meta, Google, Nvidia, OpenAI, and Anthropic during an August 4 White House meeting. The federal framework, established following a June 2 executive order, aims to create classified benchmarks to determine if frontier models can perform complex cyber operations threatening government systems or critical infrastructure. Testing will focus on proprietary models like Anthropic’s Mythos and Fable, and OpenAI’s GPT-5.6 Sol. Open-weight models, which allow developers to download, inspect, and modify underlying weights, are exempt. Critics argue this creates a security gap, as these models can spread rapidly and have safeguards removed. The White House has not clarified if the exclusion applies to all open-weight releases or only those below a specific capability threshold. Additionally, officials have not identified the operating federal agency, disclosed evaluation result publication plans, or defined consequences for models demonstrating dangerous capabilities. The voluntary nature of the program raises questions about developer compliance and future testing frameworks for open-weight systems.

💡 By exempting open-weight models, the government ignores the very systems most easily modified by malicious actors to bypass safety controls. This oversight leaves a critical blind spot in national cybersecurity defenses against rapidly proliferating, unregulated AI tools.