| ← back to comparethecloud.net | | Compare the Cloud · Morning Edition | Tuesday, 5 May 2026 · London |
Morning Edition.Ten curated stories, worldwide perspectives, before 9 a.m. | | 01 — Microsoft Takes Agent 365 to General Availability as Shadow AI Becomes an Ent... | 01 | | 02 — Inside AMEX's Agentic Commerce Stack: Intent Contracts, Single-Use Token... | 02 | | 03 — Enterprise Storage Architects Are Betting on SSDs. They May Be Leaving a Tril... | 03 | | 04 — The RAG Era Is Ending for Agentic AI as Hybrid Retrieval Intent Triples to 33... | 04 | | 05 — Fortinet Advances Security Fabric to 8.0 with AI Governance Controls and Quan... | 05 | | 06 — Nearly €80 Billion of Public Money Is Flooding Into European VCs and Startups... | 06 | | 07 — Google AICore Is Using Gigabytes of Android Storage by Design — and Enterpris... | 07 | | 08 — Boomi Builds Analyst Momentum Across Integration, API Management, and Data Ma... | 08 | | 09 — Windows Has Been Logging Every App Install and Uninstall for Years — Enterpri... | 09 | | 10 — Google Play Protect Is Blocking Enterprise Apps — Here Is What IT Admins Need... | 10 |
| | Enterprise AI · Operations Security | 01 |
CTC Newsroom Microsoft Takes Agent 365 to General Availability as Shadow AI Becomes an Enterprise ThreatMicrosoft has moved its Agent 365 platform — a management layer for enterprise AI agents — from preview into general availability, citing the growing threat of ungoverned shadow AI deployments across corporate environments. The GA launch signals that governing autonomous agents has become an operational priority, not a future consideration. GA Agent 365 status — 1 May 2026 |
| Agent 365's move to general availability is Microsoft betting that every enterprise will need an agent governance stack before they need more agents — and it is probably right. The shadow AI problem in 2026 is not just rogue ChatGPT usage; it is entire agentic pipelines running on business-unit credit cards, with no audit trail and no kill switch. IT directors who have been treating agent governance as a 2027 conversation need to bring it forward. The organisations that set the baseline now will not be explaining incidents to their boards later. — Kate Bennett · CEO, Compare the Cloud |
| Inside AMEX's Agentic Commerce Stack: Intent Contracts, Single-Use Tokens, and the Future of Enterprise PaymentsAmerican Express is building an agentic commerce layer that lets AI agents purchase on behalf of users through its ACE developer toolkit — using intent contracts to define spending scope and single-use tokens to secure individual transactions. The system currently operates within Amex's own network, though the company participates in cross-industry interoperability protocols including Google's Agent Pay Protocol. | Amex is not building a payment product here — it is building trust infrastructure for the agentic economy. Intent contracts and single-use tokens are the primitives that prevent an AI agent from turning a 'book me a flight' instruction into an unlimited corporate card. The interesting tension is that Amex's ACE toolkit is Amex-network-only for now, whilst the industry is coalescing around interoperability protocols like AP2. Enterprise treasury and procurement teams should be watching this closely: whoever sets the token standard wins the rails. — Kate Bennett · CEO, Compare the Cloud |
| | Enterprise IT · Storage Architecture | 03 |
· · · Enterprise Storage Architects Are Betting on SSDs. They May Be Leaving a Trillion Gigabytes on the Table.A new generation of tape storage is approaching 1,000 TB per cartridge, outpacing SSD cost-per-gigabyte for cold storage by orders of magnitude — yet most enterprise storage architects are designing around flash-first assumptions that made sense in 2020 but are increasingly expensive at scale. The case for reconsidering hierarchical storage management is quietly returning. | The dirty secret of the SSD era is that tape never went away in the hyperscaler world — it just became invisible because nobody wrote about it. At the petabyte scale, tape's cost-per-gigabyte for cold data is so far below SSD that the economics are almost embarrassing. What is shifting now is the capacity cliff: when a single cartridge holds 1,000 TB, the operational overhead of tape robot management starts to look very different. Enterprise storage leads who last reviewed their tiering strategy in 2021 should revisit it before their next refresh cycle locks them into unnecessary flash costs. — Kate Bennett · CEO, Compare the Cloud |
| | Enterprise AI · Architecture | 04 |
33% The RAG Era Is Ending for Agentic AI as Hybrid Retrieval Intent Triples to 33 Per Cent33.3% Hybrid retrieval intent — Q1 2026 | ↓ Standalone vector DB adoption share | 3× Growth in hybrid intent year-on-year |
| The decline of pure RAG is not a technical footnote — it is a capital re-allocation signal for every team that spent 2024 building a vector database strategy. Agentic AI needs context that persists across turns and tasks, not just a similarity search against a static corpus. The compilation-stage knowledge layer emerging here is closer to a working memory than a retrieval index, and the vendors who understand that distinction early will own the next three years of enterprise AI infrastructure. If your architecture review board has not revisited your retrieval strategy since 2024, this is the prompt. — Kate Bennett · CEO, Compare the Cloud |
| | Asia-Pacific · Cybersecurity | 05 |
Alert Fortinet Advances Security Fabric to 8.0 with AI Governance Controls and Quantum-Ready ProtectionFortinet has announced FortiOS 8.0 at its global and Taiwan user conferences, adding AI governance controls and quantum-resistant security features to its Security Fabric platform. The upgrade addresses two of the most significant emerging vectors in enterprise security: ungoverned AI agent behaviour and the long-term threat posed by quantum computing to current encryption standards. | Fortinet shipping quantum-ready protection in the same release as AI governance controls is a calculated message: the two existential threats to enterprise security in the next decade are arriving simultaneously, and platform vendors need to address them together. The quantum timeline is longer — harvest-now-decrypt-later attacks are the near-term concern — but the AI governance piece is urgent right now, particularly for organisations running agentic workloads on Fortinet infrastructure. Security leads at Taiwan and APAC-headquartered enterprises should treat this as a signal to accelerate their FortiOS upgrade cycle. — Kate Bennett · CEO, Compare the Cloud |
| | Europe · Venture Capital | 06 |
$ europe/venture capital Nearly €80 Billion of Public Money Is Flooding Into European VCs and Startups. Is It Working?Nearly €80 billion of public money has entered the European venture and startup ecosystem, raising fundamental questions about capital efficiency, dependency on state funding, and whether subsidised growth produces the category-defining companies that private capital alone might have built. The influx is reshaping European VC economics, with LPs increasingly expecting state co-investment as a baseline condition. | €80 billion of public capital flowing into a market that was previously disciplined by private-sector return expectations is not neutral. The question of whether it is working depends entirely on the benchmark — market-rate returns, job creation, sovereignty in strategic sectors, or something else. What is less ambiguous is that European founders are now navigating a funding environment where state co-investors have different time horizons, different governance demands, and different definitions of success than commercial VCs. Understanding that dynamic is now a core competency for any European startup raising a Series B or later. — Kate Bennett · CEO, Compare the Cloud |
| | Enterprise Mobile · On-Device AI | 07 |
Google AICore Is Using Gigabytes of Android Storage by Design — and Enterprise IT Needs a Policy ResponseGoogle has confirmed that AICore — the system app managing on-device AI including Gemini Nano — intentionally consumes gigabytes of device storage for model downloads and pre-processing. Enterprise mobile fleet managers whose policies assumed 2–3 GB of system overhead are finding that AI model storage can consume 8 GB or more per device without warning. 8 GB+ Potential AICore model storage per Android device |
| The 'it's by design' explanation from Google is accurate and, from an enterprise perspective, completely inadequate as a policy response. IT departments managing large Android fleets need to know that AICore storage is not capped, not predictable from device spec sheets, and not configurable through standard MDM profiles. If your MDM policies include Pixel or Samsung Galaxy devices, your storage baseline assumptions from 2023 are probably wrong. Revalidate them before the next refresh cycle, not after. — Kate Bennett · CEO, Compare the Cloud |
| | Africa · Enterprise Integration | 08 |
Liberté, égalité, sovereignty. Boomi Builds Analyst Momentum Across Integration, API Management, and Data ManagementBoomi has been recognised across integration, API management, and data management categories in analyst reports — a signal that the platform is consolidating its position as a mid-market integration hub at a time when enterprise teams are under pressure to connect an expanding set of AI and data tools. Coverage spans Gartner and Forrester. | Analyst momentum at this level is a sales signal as much as a technical one. When Gartner and Forrester both cite a vendor across integration, API management, and data management in the same period, procurement teams at mid-market enterprises take notice — and Boomi has historically been strong in exactly the markets where ITWeb's readership operates. For African and emerging-market IT directors building integration strategies around AI-ready data pipelines, Boomi's analyst traction deserves a place in the shortlist conversation this quarter. — Kate Bennett · CEO, Compare the Cloud |
Source · ITWeb · 5 May 2026 | | Enterprise IT · Data Governance | 09 |
| / / / / / / / / / / / / / / / / / / / / |
Zero-day Windows Has Been Logging Every App Install and Uninstall for Years — Enterprise IT Needs to KnowWindows has quietly maintained a detailed log of every application installed and uninstalled on the device — a record that reveals more about user behaviour, software licensing compliance, and potential policy violations than most IT departments realise. The logs, accessible via Event Viewer, predate most organisations' current data governance policies. | This is not a new vulnerability — it is a longstanding logging behaviour that most enterprise IT teams have simply not incorporated into their data governance frameworks. The implication is meaningful: every endpoint in your fleet has been writing a timestamped software diary, and the question is whether your governance policies acknowledge it, your legal team has considered it in discovery scenarios, and your security operations have integrated it into their investigations workflow. If not, that is an audit gap hiding in plain sight on every Windows device in the estate. — Kate Bennett · CEO, Compare the Cloud |
| | Enterprise Mobile · Security Policy | 10 |
Google Play Protect Is Blocking Enterprise Apps — Here Is What IT Admins Need to ConfigureGoogle Play Protect's increasingly aggressive app-blocking behaviour is creating friction for enterprises running sideloaded or custom-signed Android applications that fall outside its trust model. IT administrators are finding that GPP blocks legitimate enterprise apps, requiring explicit MDM overrides and user education to maintain fleet functionality. | Article I. Read the clause as you would a court ruling: the practical effect starts on publication, not the day the text was first circulated. |
| Google Play Protect becoming more aggressive is the right call for consumer security, but the enterprise trade-off has not been well communicated by Google's MDM documentation. Organisations relying on sideloaded enterprise apps, custom APKs, or line-of-business apps outside the Play Store are hitting friction that requires explicit MDM policy configuration. This is the kind of platform change that creates invisible incidents — end users simply cannot install the app, and the error message does not explain why. IT security leads should audit their Android MDM policies against GPP's current ruleset before the next platform update sharpens the restrictions further. — Kate Bennett · CEO, Compare the Cloud |
| That's the front page.Curated from the CTC Monitor worldwide feed — narrowed to the ten that matter before nine. Morning Edition · Compare the Cloud · Tuesday, 5 May 2026 · London View on the web · Unsubscribe |
|