# AI training portals, cloud sandboxes, and security advisories - Week of September 28, 2026

URL: https://decisioninsights.ai/ai-training-portals-cloud-sandboxes-and-security-advisories-week-of-september-28-2026/

Overview of Recent ActivityDuring the reporting period, organizations issued AI training and operationalization initiatives, expanded agent-focused infrastructure, and released security and vulnerability advisories. Communications also covered platform and ecosystem updates across cloud sandboxing, secure delivery, cryptographic validation, and managed inference arrangements, alongside operational guidance for device and software risk.Key Themes and DevelopmentsTechnology Releases & Product EnhancementsVerizon launched an online portal that curates AI training content from multiple organizations and said courses “typically cost about $700 per year” and were made free through the portal. It also partnered the portal with a $1 million grant tied to practical AI skills for individuals and small businesses.Docker launched “Cloud Sandboxes” to support secure, isolated execution of AI agents in the cloud, extending its local sandbox approach with microVM isolation and a policy model. Aviz said its Aviz ONES is available in NVIDIA DSX Air for design, simulation, and deployment of multi-tenant networking based on NVIDIA reference architectures.Partnerships & Ecosystem EngagementIBM UK said it completed plans to acquire Logiq Consulting, described as an NCSC-assured consultancy, to expand cybersecurity assurance and Secure by Design capabilities. IBM said Logiq Consulting’s DISX® operates as a managed, sovereign collaboration platform for government suppliers to exchange sensitive information with UK Government and Defence organizations.Commvault said it will participate in NetApp INSIGHT 2026, with planned demonstrations and discussions covering hybrid cloud protection and recovery workflows. Synack said it expanded purchasing options for AI and human penetration testing across AWS, Microsoft, and Google Cloud marketplaces and through the Tradewinds Solutions Marketplace and Carahsoft.Infrastructure, Platform, or Deployment UpdatesCISA issued updates for multiple product vulnerabilities. It reported ViewSonic vCast unauthenticated flaws identified as CVE-2026-82989, CVE-2026-82988, and CVE-2026-82987 that can be chained to achieve full device compromise. CISA also described Readwise Reader stored XSS issues and noted version 8.10.1 includes a patch that addresses the sanitizer-wildcard issue.Door access controllers on Norwegian Cruise Line ships were described as containing an improper authentication vulnerability that permits a replayed unique identifier from RFID devices to grant unauthorized entry, tracked as CVE-2026-75907. CISA also published guidance on Imprivata Enterprise Access Management versions 26.2.6 and below, stating there is “no supported mechanism to rotate this RSA key pair after deployment” for CVE-2026-82356.Full Update IndexVerizon launches free AI training portal and $1 million Liberty Science Center grant  Verizon launched a free online AI training portal and paired it with a $1 million Liberty Science Center grant.CISA and Readwise Reader Android report multiple stored XSS vulnerabilities  Readwise Reader Android 8.7.2 has stored XSS bugs tied to CVE-2026-18311, CVE-2026-18312, and CVE-2026-18320.OpenText Announces Amendments to its Previously Announced Tender Offer for a Portion of its Outstanding 3.875% Senior Notes due 2028  OpenText announced amended terms to its cash tender offer for its outstanding 3.875% Senior Notes due 2028, including a reduced maximum tender amount and extended withdrawal, price determination, and…VEON and Square Group Receive Bangladesh Bank Digital Bank Approval  VEON and Square Group said Bangladesh Bank approved their joint venture Digital Bank license.VU#676317: Norwegian Cruise Line door access controller contains an improper authentication vulnerability  Overview Door access controllers used on Norwegian Cruise Line (NCL) ships contain an improper authentication vulnerability that permits a replayed unique identifer (UID) from a radio-frequencyCISA issues update on unauthenticated ViewSonic vCast flaws  ViewSonic vCast contains unauthenticated flaws CVE-2026-82989, -82988, and -82987 that can be chained for full device compromise.Netskope Threat Labs details a Google Ads-delivered fake security locker  Netskope Threat Labs reports a cloud-hosted tech-support-scam kit that uses a mouse-movement gate and runtime decryption to show a full-screen fake alert.NSS Labs details relaunch under new ownership  NSS Labs relaunched under new ownership and will provide cybersecurity testing for enterprises, vendors and service providers.NSS Labs names Dominick Delfino executive advisor  NSS Labs named Dominick Delfino executive advisor to support its testing for AI-driven cybersecurity.Aviz outlines NVIDIA AI factory operations  Aviz says it is helping customers operationalize NVIDIA AI Factory infrastructure with DSX Air and Aviz ONES.NSS Labs publishes two white papers on enterprise AI security  NSS Labs published two white papers on enterprise AI security with AWS, F5 and Microsoft.BAND and Docker Integrate Docker Sandboxes with BAND Rooms  BAND and Docker integrated Docker Sandboxes with BAND’s collaboration layer for isolated agent execution connected via WebSocket.Docker Launches Docker Cloud Sandboxes for Isolated AI Agent Execution  Docker launched Cloud Sandboxes to run AI agents with secure isolation in the cloud.SecurityHQ Expands Threat Intelligence Capabilities with Adversary Labs  SecurityHQ announced Adversary Labs, a threat research unit under its Adversary Labs identity. The unit uses intelligence from its global SecOps Centers and triages security incidents to produceAndo launches messaging platform for humans and AI agents  Ando emerged from stealth with $20 million funding for a messaging platform that lets AI agents join channels, threads and live conversations.Commvault to Participate in NetApp INSIGHT 2026  Commvault said it will participate in NetApp INSIGHT 2026, featuring Booth #311 and sessions on cyber resilience and hybrid cloud recovery workflows.Synack expands marketplace access for AI and human penetration testing  Synack expanded purchasing options for AI and human penetration testing via AWS, Microsoft and Google Cloud marketplaces and U.S. public sector channels.SEALSQ Corp Secures Active NIST CMVP FIPS 140-3 Level 3 Validation  SEALSQ said VaultIC408 received active NIST CMVP FIPS 140-3 Level 3 validation for version 1.2.4 through 2031.IBM UK to acquire Logiq Consulting for cybersecurity and secure delivery  IBM UK plans to acquire Logiq Consulting, adding cybersecurity assurance, Secure by Design, secure systems engineering, and DISX®.Island Announces $400 Million Series F, Bringing Valuation to $6.4 Billion  Island announced a $400M Series F, valuing the company at $6.4B. The company positions its “agentic control plane” as enterprise visibility, governance, and auditing across browsers, endpoints,IBM expands Digital Asset Haven with Swift ledger and on-premises beta  IBM expanded IBM Digital Asset Haven with a beta Swift shared-ledger connection and an on-premises beta deployment option.Synopsys and TSMC expand A14-certified EDA and multi-die enablement  Synopsys and TSMC reported A14-certified EDA flows and IP enablement, including multiphysics signoff, multi-die support, and packaging co-design work.CISA issues alert on Kotaemon improper authorization checks  Cinnamon’s Kotaemon (all versions up to v0.12.0) improperly checks conversation ownership, letting authenticated users read, delete, rename, or overwrite others’ conversations.CISA issues update for Imprivata EAM RSA key rotation flaw  Imprivata Enterprise Access Management versions 26.2.6 and below do not rotate its RSA key pair, enabling CVE-2026-82356 impersonation.Crusoe and Thinking Machines Lab Set $65 Million Managed Inference Agreement  Crusoe and Thinking Machines Lab agreed to a $65M annual contract for managed inference on Crusoe Cloud for production workloads.