Strip away the product names and today's stories are all the same story: control. Who decides which model you get, who governs who can touch what, and who gets to write files to your mail gateway. Three items, one question — who holds the keys.
Google puts its best models behind the paywall
The free ride on frontier models is quietly ending. Google is limiting free and AI Plus users of the Gemini app to its lighter Flash-Lite model while reserving newer models and the Deep Think reasoning mode for paid AI Pro subscribers — a change rolling out shortly and landing just days after the Gemini Argon launch.
The operator's take: this is the AI business model converging on the oldest one in software — tiering. The interesting signal isn't the price, it's the segmentation: the labs now know which capabilities people will pay for and are fencing them accordingly. If you built a workflow or a product feature on casual free-tier access to a strong model, you just inherited a line item you didn't budget for. Price your AI dependencies like the metered utilities they're becoming, and never ship a feature whose unit economics only work while someone else eats the inference cost.
ServiceNow buys its way into identity
The platforms keep swallowing the point tools. ServiceNow is acquiring Veza, an identity-security company focused on governing who and what can access sensitive systems and data. It's the latest in a busy stretch of security consolidation — the same week brought an M&A roundup featuring new acquisitions from Palo Alto Networks and IBM.
The operator's take: identity is the control plane now — most breaches are a login, not a hack — and the big workflow platforms want to own it end to end. For buyers, that's convenience and consolidation risk in the same box: fewer vendors to wrangle, but more of your security posture riding on one roadmap and one renewal. If identity governance is becoming a platform feature rather than a standalone purchase, use that leverage at your next negotiation, but keep your access policies and your audit data exportable so a platform decision never becomes a hostage situation.
A Fortinet zero-day is already live in the wild
While everyone watches the models, the attackers are still working the perimeter. Fortinet is urging urgent action on an exploited FortiMail zero-day, CVE-2026-104286, a critical-severity path traversal flaw that can let attackers write arbitrary files to the system. It's one of several edge-device bugs under active exploitation lately, alongside a critical Cisco Catalyst SD-WAN zero-day flagged for active attacks.
The operator's take: internet-facing security appliances are the highest-value real estate on your network, because they sit at the boundary and usually run with deep privilege. "Actively exploited" plus "arbitrary file write" on a mail gateway is a patch-tonight, not a patch-next-sprint. Inventory every edge appliance you own, subscribe to the vendor advisories instead of hearing about it from a breach, and treat these boxes as the first thing you patch — the attacker certainly treats them as the first thing they try.
Also on my radar
- Sovereign AI gets a real product. German firm Aleph Alpha released a language model called Kolibri aimed at public administration and industry, designed to run on infrastructure the customer controls — if data residency and "no, it can't leave our walls" are blockers for you, self-hostable models are becoming a category, not a compromise.
- Anthropic is funding the talent pipeline. Anthropic pledged $100 million to train 10,000 enterprise AI engineers — the bottleneck on enterprise adoption isn't models anymore, it's people who can wire them into real systems, and the labs know it.
- Agent permissions are the next access fight. Apple notified developers that, as AI agents grow more autonomous, full-disk access to everything on a Mac is an increasing risk — before you let an agent run with broad local access, scope it like you'd scope any new privileged service account.
The throughline: every one of these is a fight over access. Google is gatekeeping which model you get, ServiceNow is buying the tooling that decides who gets into your systems, and an attacker is trying to grant themselves access through your mail gateway. The companies winning right now are the ones treating access — to compute, to data, to privilege — as the thing worth controlling. Make it the thing you control too. That's the Signal for today.
Paul Sapio is the CIO of Mikhail Education and a full-stack AI engineer. Open to contract work in security, networking, AI, and SaaS development — reach out.