Zero trust SSE, DSPM, and AI security platform updates - Week of July 6, 2026

Overview of Recent Activity

Organizations addressed security and governance across endpoints, cloud services, and AI workflows, while several vendors released product updates, expanded ecosystem partnerships, or progressed deployments. Notable items included CISA alerting on local privilege escalation vulnerabilities in Little Orbit’s GFAC driver, NSS Labs publishing an SSE threat protection evaluation of Zscaler Zero Trust Exchange, and multiple companies detailing AI security and data protection approaches spanning runtime controls, AI data flows, and sovereign storage for AI workloads.

Key Themes and Developments

Technology Releases & Product Enhancements

Cequence Security released Cequence Platform 9.0 with a built-in AI Assistant, an open Model Context Protocol (MCP) server, compliance-ready risk rules mapped to 25 global regulatory frameworks, and a re-architected API security engine. The release described a governance-first design where “Human approval is required before any proposed write takes effect.”

Hopsworks released Hopsworks 5.0, adding coding agents and a terminal inside the platform, a Wizard-based workflow for production-ready pipelines, and native SQL query capabilities using Trino with dashboarding via Apache Superset. The update also added column-level access control and model registry imports from Hugging Face.

Partnerships & Ecosystem Engagement

CKEditor became available to government agencies via Carahsoft contract vehicles, with Carahsoft serving as CKEditor’s “Master Government Aggregator.” CKEditor described CKEditor AI as an integration and governance layer between language models and the document, and said it supports secure connections using Model Context Protocol (MCP) for approved agents, data sources, and large language models, including air-gapped environments.

Scality and OVHcloud expanded their technology partnership for a joint sovereign storage platform for European digital sovereignty. The companies described a deployment model that included a 100% dedicated sovereign cloud option and on-premises deployment through OVHcloud OPCP, along with backup replication across multiple availability zones and integration with Veeam.

Infrastructure, Platform, or Deployment Updates

Applied Digital said it reached Ready for Service for Phase 1 of Building 2 at Polaris Forge 1, delivering 75 MW of operational AI capacity on schedule. The company reported total live capacity at the Polaris Forge 1 campus reached 175 MW and said the site is located in Ellendale, North Dakota, where it has operated since 2021.

Varonis Systems reported that its Data Security Platform received GovRAMP Authorization, stating it met security requirements for state, local, tribal, and educational government agencies. The company described GovRAMP as related to how state and local government agencies and their vendors assess and authorize cloud services.

Full Update Index

Weekly roundup covering CISA endpoint vulnerability alerting, zero trust and SSE evaluation reporting, DSPM and AI data security surveys, sovereign storage partnerships, AI and API security platform releases, and data center or compute capacity deployment updates.

1. CISA issues alert on GFAC driver local privilege escalation
   Little Orbit’s GFAC driver has local privilege escalation and DoS issues via a minifilter port, including null dereference and write-what-where flaws.
2. Teleport earns Platinum 2026 Pinnacle Award for Zero Trust Solution of the Year
   Teleport received a Platinum 2026 Pinnacle Award for Zero Trust Solution of the Year for its Infrastructure Identity approach covering humans, machines, workloads and AI agents.
3. Varonis Systems Receives Gartner Peer Insights Customers’ Choice for DSPM
   Varonis received Gartner Peer Insights Customers’ Choice for DSPM for the third straight year, with 97% customer willingness to recommend.
4. Netskope outlines zero trust and SASE steps for healthcare AI governance
   Netskope survey finds many healthcare orgs build AI but use it without oversight, raising shadow AI exposure and governance concerns.
5. Applied Digital Reaches Ready for Service for Building 2 Phase 1 at Polaris Forge 1
   Applied Digital reached Ready for Service for Phase 1 of Building 2 at Polaris Forge 1, delivering 75 MW on schedule and bringing live capacity to 175 MW.
6. SEALSQ to Bring Post Quantum Security to the Automotive Industry
   SEALSQ announced a roadmap to embed post-quantum cryptography into automotive silicon across TPMs, secure microcontrollers, HSM IP, chiplet-based HSMs, and custom ASICs. The company cites alignment with ISO 26262, ISO/SAE 21434, and UNECE R155, and positions chiplet-based hardware security as part of zonal and central-compute SoCs.
7. CKEditor and Carahsoft Partnership Makes Editor Available Through Government Contracts
   CKEditor became available through Carahsoft contract vehicles, with CKEditor AI features for governed drafting, review, and translation.
8. EMA Research and Skyhigh Security Report Ranks AI Data Flow Security as Top DSPM Investment Driver
   Joint EMA Research and Skyhigh Security report cites securing AI data flows as top DSPM investment driver at 64.4%.
9. NSS Labs outlines a runtime and governance framework for enterprise AI security
   NSS Labs’ two-part series says enterprise AI security evaluations must extend beyond model protection to runtime guardrails, governance, and auditable controls.
10. Zscaler Zero Trust Exchange Delivers Strong Threat Protection in NSS Labs New, More Rigorous SSE Test
    Austin, TX — June 9, 2026 — NSS Labs, the independent authority on cybersecurity product testing, today released the results of its latest Security Service Edge (SSE) Threat Protection evaluation of the Zscaler Zero Trust Exchange (ZTE). The product achieved overall Security Effectiveness at 98.85%, demonstrating strong, broad-spectrum protection against advanced threats while maintaining a The post Zscaler Zero Trust Exchange Delivers Strong Threat Protection in NSS Labs New, More Rigorous SSE Test appeared first on NSS Labs.
11. Atos named market leader for SAP Services in PAC 2026 RADAR
    Atos was named a market leader in SAP Services by PAC’s 2026 RADAR, with “Best in Class” rankings across multiple SAP categories.
12. Dell’Oro Group Reports Industrial Realignment Toward Data Center Power and Thermal Capabilities
    Industrial firms refocus on AI-linked data center power and thermal, using divestitures and targeted M&A including Carrier and Johnson Controls.
13. Notification under Chapter 9, Section 10 of the Finnish Securities Market Act: voting rights of FMR LLC in Nokia Corporation decreased below 5%
    Nokia issued a Finland stock exchange notification stating that FMR LLC’s indirect voting rights in Nokia fell below the 5% threshold as of 29 June 2026. Nokia reported a crossing from 5.05% voting rights previously to 4.92% voting rights, based on the same total number of voting shares.
14. Datadog Acquires Adaptive ML to Add RLOps Team to AI Research
    Datadog acquired Adaptive ML and said the team will join AI Research to work on world models and agent LLM post-training for observability.
15. ABI Research Forecasts Open Line System Revenue Growth to About $5 Billion by 2035
    ABI Research forecasted US OLS scale-across revenue of about $5B by 2035, citing hyperscaler Tier One deployments and distributed AI training across smaller data centers.
16. Scality and OVHcloud expand partnership for joint sovereign storage platform
    Scality and OVHcloud expanded their partnership to deliver a joint sovereign storage platform with OPCP deployment and S3-compatible object storage for AI workloads.
17. Varonis Systems receives GovRAMP Authorization for Data Security Platform
    Varonis said its Data Security Platform received GovRAMP Authorization for state and local government cloud security requirements.
18. Cequence Security Introduces Cequence Platform 9.0
    Cequence Security released Platform 9.0 with a built-in AI Assistant, an open MCP server, compliance-ready risk rules, and an updated API security engine.
19. Nutanix and North Carolina School of Science and Mathematics Establish Endowed Computer Science Professorship
    Nutanix and NCSSM created a $250,000 endowed professorship in computer science to support teacher training and open-source STEAM resources via NCSSM Connect.
20. Infoblox Expands Universal Asset Insights with Integrations and ServiceNow CMDB Sync
    Infoblox updated Universal Asset Insights with Discovery, Inventory and Insights plus integrations, ServiceNow CMDB sync, dashboards, and MCP server changes.
21. 360 Privacy names George L. Sax senior vice president for security operations
    360 Privacy named George L. Sax Senior Vice President, Enterprise Security Operations, citing his Secret Service and security-firm background tied to exposed personal data.
22. Dell’Oro Group Forecasts AI RAN Revenue to Reach $35 Billion by 2030
    Dell’Oro projects $35B in AI RAN revenue (2026-2030) and says overall RAN market growth will not expand.
23. Eviden launches Key Management System integration with Salesforce on Hyperforce and Shield
    Eviden said its KMS integration with Salesforce on Hyperforce and Shield: Platform Encryption supports a BYOSE model with keys hosted in Europe.
24. Hopsworks releases Hopsworks 5.0 with embedded coding agent and terminal
    Hopsworks released Hopsworks 5.0, adding embedded coding agents and terminal, a redesigned UI and Wizard, Trino SQL and Superset dashboards, and new data and governance features.
25. Eclipse Foundation and ORC Working Group launch ORC Learning Hub for CRA readiness
    The Eclipse Foundation and ORC Working Group launched the ORC Learning Hub, free training on EU CRA readiness for open source roles.