July 2026 Summaries

In response to growing concerns about the potential future capabilities of quantum computers to break existing cryptographic systems, the US government issued Executive Order 14412 in June 2026, mandating the transition of federal agencies to post-quantum cryptography (PQC). This directive sets a timeline for migrating critical systems classified as High Value Assets to PQC, with key establishment algorithms required by 2030 and digital signatures by 2031. The move signifies a proactive risk management approach, emphasizing the urgency of starting the migration process to protect sensitive data from potential future threats, such as the "Harvest Now, Decrypt Later" (HNDL) attacks. While this order directly impacts US federal agencies, it also indirectly influences global companies, particularly those in the supply chain for US government contracts, by setting new NIST standards that could become industry baselines. The transition's urgency stems from the lengthy process involved in cryptographic migration, including inventorying systems, updating libraries, and ensuring application compatibility. This executive action highlights the importance of starting the PQC migration process now to safeguard data with long-term value, as waiting for quantum computers to become a reality may leave organizations vulnerable to retroactive decryption of classical cryptography-protected data.

AI agents from companies like OpenAI, Anthropic, and various startups are actively utilizing production APIs, revealing challenges in differentiating between legitimate AI activity and potential scraper attacks due to similar traffic patterns. Traditional API infrastructures, designed for human interaction, are ill-equipped to handle the rapid, parallel request bursts that characterize AI agent traffic, unlike the slower, more deliberate patterns of bots. This mismatch results in inefficiencies, such as ineffective rate limits and authentication issues, which can be resolved by implementing strategies like behavioral rate limiting, machine-to-machine OAuth flows, and improved observability. By adapting APIs for AI agent compatibility, companies not only mitigate security risks but also unlock opportunities for their APIs to serve as valuable components in emerging AI applications, thereby positioning themselves advantageously in the evolving software landscape.

In July 2026, Palantir CEO Alex Karp critiqued the token-based business model for AI inference pricing, highlighting its complexity and disconnect from business outcomes. This model, which charges based on tokens representing segments of text processed by AI, poses challenges for financial teams due to its variability across different models and languages. Notably, token pricing can become unpredictable with agentic workflows and multilingual applications, leading to inconsistent costs. As an alternative, compute-based pricing, which charges based on memory usage and execution time, offers a more transparent and familiar framework for teams, aligning costs with observable metrics and encouraging efficient resource use. Companies like Cloudflare and Azion are already exploring compute-based models, emphasizing the need for a governance framework that accommodates AI's rapid adoption without the intricacies of token translation.

Security stack fragmentation, where tools like WAF, bot management, and DDoS protection operate independently without shared telemetry or policy, creates significant vulnerabilities and inefficiencies in incident response. Each tool functions as intended within its specific domain, but without integrated communication, they fail to collectively address coordinated multi-layer attacks. This disconnect leads to increased investigation time, policy drift, and conflicting decisions, ultimately allowing attackers to exploit the gaps between the tools. A unified security architecture addresses these issues by establishing a shared control plane, telemetry, and policy, enabling tools to work cohesively and providing immediate, comprehensive visibility during incidents. The business case for consolidation emphasizes reduced operational costs, minimized attack surfaces, and faster response times, which outweigh the costs associated with maintaining a fragmented stack.

Cloud adoption, once a cost-saving measure for companies transitioning from on-premises hardware, has become increasingly expensive due to stable per-GB egress prices amid soaring data volumes, as highlighted by the rising costs from AWS, GCP, and Azure. A detailed analysis reveals that while cloud egress charges remain unchanged since 2020, the data volumes have increased significantly, causing substantial financial burdens on companies. The architectural shift towards distributed networks for stateless workloads can offer substantial cost reductions and latency improvements by routing data through global points of presence, rather than through centralized cloud origins. This approach shows promising reductions in egress costs and latency, with particular challenges faced by SaaS platforms, FinOps teams, and global APIs, which often overlook the hidden expenses associated with cross-region traffic. Despite the benefits of cloud migration in the past, the landscape has evolved, necessitating a reevaluation of cloud strategies to ensure financial efficiency and performance optimization.