Reinventing the AI Supply Chain: Inside JFrog and NVIDIA’s trust layer for AI Agents

artificial intelligence 22 Apr 2026

Yashaswi Mudumbai, Senior Director of Solutions Engineering, APAC, JFrog

Q1: JFrog has announced a new integration with NVIDIA around agentic AI. What problem is this solving and why is it becoming critical now?

At the core, this solution closes a growing trust gap. As AI evolves from copilots to autonomous agents that can access systems, data, and tools, they require stronger governance than traditional software pipelines can provide. The risk is real, just as a malicious software package can compromise an application, an unvetted skill can guide an agent to perform harmful actions.

In an agentic environment, it is now about governing skills, models, MCP services, and other agentic assets that can directly influence how AI behaves in production.

This is critical because AI agents are moving from experimentation into real enterprise workflows. JFrog’s new Agent Skills Registry, with early integration with NVIDIA, is designed to provide the missing trust layer required for autonomous AI workforces to operate safely at enterprise speed and scale.

By serving as a secure system of record for skills, models, MCPs, and agentic binary assets, JFrog serves as a secure, single source of truth for rigorously scanning and governing all agentic binary assets, which NVIDIA’s NemoClaw then executes in highly isolated sandboxes with zero initial permissions. This ensures every skill is approved and safe for use at enterprise scale.

Enterprises cannot rely on blind trust, they need a way to verify which agents and assets are being used, where they come from, and whether they comply with internal policies before agents can operate at scale.

Q2: Many Australian organisations struggle to move AI projects from pilot to production due to security and compliance concerns. How does this joint solution with NVIDIA help bridge that gap?

One of the biggest barriers to scaling AI is that innovation often outpaces governance. Teams build pilots and test models, but when it comes to deploying them into production, questions around security, compliance, and accountability slow everything down.

The partnership between JFrog and NVIDIA helps put structure around that process, giving organisations a centralised way to manage all the components that power AI agents, from models to connectors to reusable skills, while ensuring they meet enterprise standards before they are deployed.

Instead of relying on fragmented tools or manual approvals, organisations can automate checks, enforce policies, and maintain visibility across the entire lifecycle. That makes it much easier to move from experimentation to production without introducing unmanaged risk.

Q3: As AI adoption accelerates globally, how is the concept of an “AI Supply Chain” evolving compared to traditional software pipelines, and how is Australia responding?

The AI supply chain is fundamentally different from traditional software delivery. In the past, organisations were managing relatively static components like code and packages. Now they are dealing with dynamic elements such as models, datasets, prompts, and agent behaviours.

With AI systems now adapting and acting independently, this means organisations need to track not only what goes into an application but also how it behaves once deployed. In Australia, we’re seeing a strong emphasis on governance and accountability as part of this shift, particularly as organisations align with the Australian Government’s AI in Government Policy and broader responsible AI frameworks that emphasise transparency, accountability, and safe deployment.

Enterprises are recognising that adopting AI at scale requires visibility, traceability, and control, particularly in an increasingly regulated marketplace.

Q4: Australia is seeing growing enterprise investment in AI, particularly across sectors like financial services and government. What specific risks or opportunities do you see for Australian organisations adopting agentic AI?

When agents are given access to internal systems, data, and workflows, any gap in oversight can lead to serious consequences, from data exposure to compliance breaches. There is also a growing concern around ‘shadow AI,' where teams adopt tools or models outside of approved processes. This creates blind spots for security and governance teams, making it difficult to understand what is actually running inside the organisation.

For Australian enterprises, especially those operating in regulated environments, the priority is to ensure that innovation is matched with strong controls from the outset. Those that get this balance right have a clear opportunity to build a trusted AI and software supply chain that not only reduces risk, but also accelerates speed to market by giving teams the confidence to scale AI safely and consistently.

Q5: Trust and governance are emerging as major concerns for enterprises deploying AI agents. How does JFrog’s new Agent Skills Registry address these challenges in practical terms?

JFrog’s Agent Skills Registry is designed to bring order to what is otherwise a highly fragmented landscape. It acts as a central point where organisations can manage the different components that AI agents rely on.

This means every skill or asset can be inspected, validated, and approved before it is made available for use. It also allows organisations to define who can access what and under what conditions, ensuring that agents operate within clearly defined boundaries.

Importantly, it creates an audit trail, enabling organisations to track where assets came from, how they were used, and whether they meet compliance requirements. That level of visibility is essential for building trust in systems that are becoming autonomous.

On the execution side, NVIDIA’s NemoClaw then runs each agent in an isolated, virtual environment, sandboxed with zero initial permissions. Thus, even if a skill were to behave unexpectedly, it can not affect broader systems or trigger network-level risk.

Q6: For developers and engineering teams in Australia, how can they balance strong governance with the need to innovate quickly when building and deploying AI agents?

The goal is to embed governance into the workflow rather than treat it as a separate step. If security and compliance rely on manual reviews, they will always slow teams down.

Instead, organisatons should focus on automating these controls. By providing developers with access to pre-approved, trusted components, they can move quickly without needing to navigate complex approval processes each time.

This approach allows teams to maintain speed while ensuring that everything they use has already been vetted. For Australian organisations, particularly those under regular pressure, this balance between agility and control is critical to scaling AI successfully.

AI’s Double-Edged Sword: Countering AI-Enabled Cyberattacks by Deploying Defensive AI Strategies

artificial intelligence 24 Feb 2026

By Dr. David Utzke, CEO and CTO at MyKey Technologies

Organizations are at an inflection point where AI is accelerating cybercrime at scale, as experts warn that it broadens the attack surface, creates new vulnerabilities, and introduces complex governance and compliance challenges.

Like all AI systems, those deployed in cyberattacks continuously learn and evolve, enabling them to adapt, evade detection, and develop attack patterns that traditional security tools may fail to recognize.

Furthermore, AI agents capable of operating autonomously are significantly increasing the scalability and sophistication of cyberattacks and fraud operations.

(Q) What makes AI-powered cyberattacks fundamentally different from traditional automated cyber threats?

This is a great question and one that I am frequently asked. I find it helpful to begin by defining a cyberattack. In cybersecurity, a cyberattack is an intentional, malicious attempt by an individual or organization to breach a computer network or system. These attacks aim to compromise the CIA triad: the Confidentiality, Integrity, or Availability of digital assets and information. The NIST (National Institute of Standards and Technology) CSRC (Computer Security Resource Center) Glossary officially defines it as an attempt to gain unauthorized access to system services or resources, or to compromise system integrity and availability.

So, working from this common definition of cyberattacks, AI-powered cyberattacks differ from traditional, non-AI attacks primarily through increased speed that increases the capability in the number of attacks, considerable automation lowering the barrier to entry, and intelligent, real-time adaptation to avoid detection. While traditional attacks rely on manual, static methods, AI technologies enable autonomous scanning, evasive polymorphic (i.e., occurring in several different forms) malware, and highly personalized social engineering at scale, transforming the threat landscape from weeks of planning to near-instantaneous execution.

Some of the core advancements in AI technology-facilitated cyberattacks include:

o Hyper-personalized social engineering

o Synthetic media (deepfakes)

o Autonomous vulnerability discovery

o LLMjacking

o Prompt Injection

o AI Model data poisoning

(Q) How can autonomous AI agents amplify the speed, sophistication, and scale of modern cybercrime?

It is important to articulate that the term “autonomous AI agents technology” is considered partially accurate but often hyped, representing an emerging capability rather than a fully realized, foolproof technology as of the time of this interview. I have to laugh every time I see the ServiceNow ad on streaming. In the dialogue, when AI agents are brought up, it is clarified that they are not just “secret agents,” but rather “autonomous minions that you control” to handle routine, repetitive tasks. How can the minion (def.: underling of a powerful person) at the same time be autonomous? Get it? The hype!

So, here is another opportunity to define another frequently misunderstood term from the perspective of AI architecture. An “AI agent” is most commonly an LLM (Large Language Model) that can take actions to achieve specific, high-level goals with minimal human oversight – a step up from an AI bot. Unlike an AI bot, AI agents can break down complex tasks, use tools, and learn from experience.

An AI agent is a coded system that can, to a limited extent, set its own sub-goals, plan, and take actions to achieve a high-level objective with little to no human intervention. However, most, if not all, current “autonomous” agents require human-in-the-loop for oversight (aka Human Agent), especially for high-stakes decisions, making them more “agentic” than fully autonomous.

The term “autonomous AI agents” is often used as a marketing buzzword that obscures the actual technology behind it. To highlight AI technologies involved in cyberattacks, include:

o ML (Machine Learning) and DL (Deep Learning)

o GPTs (General Pre-trained Transformers) and LLMs (e.g., WormGPT and FraudGPT)

o GANs (Generative Adversarial Networks) and NNs (Neural Networks)

o NLP (Natural Language Processing): Voice-to-Text and Text-to-Voice

Given the advancements in ML, specifically DL, AI models can understand complex, nuanced language patterns. NLP is the driving force underpinning LLMs, enabling more accurate, context-aware, and human-like interactions to enact more sophisticated cyberattacks against cybersecurity frameworks, even if an organization deploys AI-enhanced cybersecurity systems.

It is for this reason that it is crucial for cybersecurity professionals to understand AI model architecture rather than treating AI as an impenetrable “singularity” or a magical black box. As AI models become deeply integrated into IT infrastructure, understanding the specific mechanisms, data pipelines, potential failure points of these systems, and how to audit AI models for vulnerabilities is essential for effective, proactive defense. Viewing AI as a “singularity,” or as a mysterious, all-knowing entity, leaves organizations vulnerable to unique, AI-based cyberattack threats.

(Q) How can organizations detect AI-generated attacks that are specifically designed to evade conventional security tools?

When I teach grad students and CPE sessions on the topic of cybersecurity, I emphasize that the first necessary step for an organization is to have a well-established AI model and data governance framework. Implementing technology governance frameworks is no longer just a compliance task; it is a foundational strategic requirement for any organization. Having AI model and data governance frameworks is critical for organizations to ensure AI initiatives are reliable, ethical, secure, and compliant with emerging regulations. Without a governance framework, organizations face significant risks beyond cyberattacks that include biased models, inaccurate or harmful outputs, as well as suffering from potential reputational damage and legal penalties.

With the above noted, cybersecurity professionals can audit and detect AI-based cyberattacks, which often evade traditional defense mechanisms. But it requires moving from point-in-time, snapshot, random, or set periodic audits to a continuous monitoring approach. Continuous monitoring is crucial because it replaces snapshot, point-in-time, or random audits with real-time, “always-on” visibility, allowing organizations to detect and remediate risks instantly rather than months later. It reduces security vulnerabilities and ensures continuous regulatory compliance (e.g., DORA, PCI DSS 4.0).

(Q) In what ways can companies move from reactive incident response to predictive, AI-driven threat prevention?

To protect against AI-based cyberattacks, organizations need to adopt a ZTA (zero-trust architecture) and a defense-in-depth strategy that combines AI-driven security tools, robust AI governance, and enhanced human training. Key measures include deploying anomaly detection, behavioral biometrics, and automated AI-based security tools to counter rapid, automated attacks, while enforcing strict data validation to prevent data poisoning.

· Defense-in-depth is a comprehensive cybersecurity strategy that layers multiple, heterogeneous security controls—covering people, technology, and operations—to protect assets, ensuring that if one defense fails, others contain the threat. Inspired by military, castle-style tactics (i.e., reinforced architecture), it aims to increase attacker complexity and prevent single points of failure.

· ZTA is a cybersecurity framework based on “never trust, always verify,” treating all network traffic as hostile, regardless of origin. It removes implicit trust, focusing on strict IAM (Identity & Access Management) verification, least-privilege access, and microsegmentation (divides networks into small, isolated, and granular security zones) to contain breaches. Key components include continuous monitoring, MFA, and data encryption to secure distributed, modern, cloud-based environments.

(Q) How can resilient risk-based AI governance frameworks help organizations rebuild trust and accountability as AI-driven threats continue to escalate?

As AI-driven cyber threats, such as adversarial attacks, data poisoning, and model BS (imprecisely called hallucination), escalate, the need for governance frameworks to provide the necessary guardrails to ensure AI technologies are reliable, ethical, and secure becomes even more urgent.

Key ways that governance frameworks rebuild trust and accountability include:

· Establishing Proactive Risk Management

· Ensuring Transparency and Explainability

· Enforcing Clear Accountability

· Implementing Real-Time Monitoring and Control

· Aligning with Ethical Standards

In addition, well-devised governance frameworks counteract escalating threats as AI-driven threats grow, by offering a structured approach to resilience by incorporating Red-teaming and adversarial testing to uncover security gaps before deployment, Data Security Posture Management (DSPM) to protect sensitive data used in AI workloads, and continuous monitoring to identify vulnerabilities and potential threats in real-time.

Ultimately, these frameworks turn cyberattacks into a manageable risk and compliant processes, moving from a position of “control” to “confidence.”

As a final note, this interview is given with an eye on research of the near-term future of cybercrimes through cyberattacks as AI technologies that are currently being converged with quantum computing. MyKey Technologies is addressing the research involving the near-term future (2026–2030) of the integration of Artificial Intelligence (AI) technologies with emerging quantum computing capabilities, which is set to fundamentally reshape the threat landscape, turning cybercrime into a highly automated, “agentic” ecosystem. While fully functional quantum attacks on encryption are anticipated closer to the 2030s, the immediate threat lies in the combination of AI-powered reconnaissance with the “harvest now, decrypt later” (HNDL) strategy.

So, balancing the immediate, “here-and-now” threat responses with attention given to near-term strategic planning is a critical, yet challenging endeavor for organizations. However, failing to do so can lead to a “whack-a-mole” cycle of endless crisis management. Effective approaches involve integrating short-term actions into a strategic vision regarded as strategic agility.

Why longevity and adaptability after deploying agentic AI will define enterprise success in 2026

artificial intelligence 19 Feb 2026

Spokesperson: Adam Beavis, Country Manager Australia and New Zealand, Databricks.

Q1: Agentic AI has moved quickly from experimentation to deployment. What will separate organisations that succeed from those that fall behind after rollout?

A: What separates organisations that win with agentic AI after rollout from those that stall is less about the tech — and more about the operating model and discipline. The key differentiators tend to be:

1. Data readiness: High performers invest heavily in clean, permissioned, continuously improving data and instrument agents with feedback loops. Without this, agent performance degrades quickly after initial rollout.

2. Strong guardrails and governance by design: Winning organisations bake in controls, auditability, escalation paths, and human-in-the-loop thresholds from day one. Those that fall behind treat governance as an afterthought—leading to trust issues, halted deployments, or regulatory friction.

3. Clear business ownership, not just tech ownership: Successful firms tie agents to specific business outcomes (cost, speed, risk reduction, revenue uplift) with accountable business unit owners.

4. Cultural and behavioural change: The biggest gap is human, not technical. Leaders who succeed redesign roles around human–agent collaboration, and retrain employees to integrate AI into their daily work and oversee autonomous systems.

Q2: Many organisations feel they have done AI once it is deployed. What often goes wrong for organisations beyond that point?

A: The biggest misconception is treating deployment as a box-ticking exercise. Models that are trained on historical data can drift as inputs change, and without consistent and continuous evaluation, problems often surface too late.

The solution is shifting from one-off checks to continuous evaluation in production. Just like humans need performance reviews, so do AI systems. Enterprises need systems that continuously measure performance against real tasks, retrain or adjust agents and balance quality against cost. Many early deployments struggle, because they were not designed with long-term operation in mind.

Q3: Why is the transition from single agents to multi-agent orchestration important for enterprises?

A: Enterprise work rarely happens in a single step. A realistic workflow often includes retrieving from multiple data sources and validating data against business rules, compliance checks, and a final decision with explainability requirements. Expecting a single agent to handle all these tasks reliably and efficiently is unrealistic.

In 2026 we will see broader adoption of multi-agent orchestration, where specialised agents handle distinct tasks and a supervising agent coordinates sequences, mirroring how human teams operate. While this gives the benefit of better performance, it also allows for improved governance. Each agent can be monitored and evaluated on its specific responsibility, modifications can be isolated, and the overall system remains transparent and auditable, and easier to troubleshoot.

Q4: Many enterprises struggle to get AI agents and applications into production. What is causing the bottleneck and how is Databricks addressing it?

A: The bottleneck is not building a demo, it is making agents reliable in the real enterprise. In productions, agents must consistently reason over complex, proprietary data, operate with guardrails and integrate with operational systems.

General knowledge of AI is becoming a commodity, but it’s still elusive to get AI that truly understands the proprietary data inside an enterprise. Many AI agents fail in enterprise environments because they prioritise ease of use over accuracy, leading to inconsistent results or behaviour organisations cannot trust.

Databricks is addressing this by building through a number of growth areas:

The rise of AI-powered coding is changing how software is built. As developers create apps via natural language processing, those apps automatically need databases and agent backends. Databricks is seeing this first-hand, with over 80% of databases launched on Databricks now being created by AI agents, rather than humans. We are enabling developers to rapidly build applications that run on Lakebase and are powered by agents, all within a unified and governed platform..
Enterprises need a modern transactional layer for AI-native apps. Traditional transactional databases have changed little for decades, so we launched Lakebase, which simplifies operational data workflows and is optimised for AI agents operating at machine speed.
Agent Bricks then helps organisations build and deploy agents that can securely work within their own data, where most of the business value sits. It helps organisations build domain-specific agents that reason over their data, track quality with task-specific benchmarks and balance performance with cost over time. The aim is to make agent quality measurable and improvable in production, not assumed at deployment.

Together, this trifecta removes the common production blockers by combining an operational database layer, an agent-building platform that works with enterprise data and an application layer that helps ship faster, with reliability and governance built in.

Q5: In Australia and New Zealand, how are organisations specifically adopting AI applications and how does that differ from earlier phases?

A: Across Australia and New Zealand, we’re seeing a pivot from general-purpose experimentation to domain-specific AI applications that are grounded in trusted enterprise data, with stronger attention to governance and sovereignty. As organisations shift from pilots into production to deliver real business outcomes, organisations are now embedding AI into real workflows, from customer support and supply chain to finance and operations.

For example, Suncorp needed to scale AI across the organisations to improve claims accuracy, reduce operational risk and support more automated digital customer experiences. Manual processes were creating additional loads for staff, and employees often lacked instant access to complex policy and claims information when decision making was required. By building, deploying and scaling domain-specific AI directly into claims workflows with Databricks, the company has achieved 99% accuracy and saved more than 15,000 hours of manual workload.

Additionally, Atlassian uses Databricks AI/BI Genie to power on demand insights in plain English through Atlassian Rovo, its AI assistant. This allows teams across the business to ask complex questions of their data and receive trusted, contextual answers directly within their existing workflows.

These examples reflect a broader trend that we’re seeing across the region in 2026, where value increasingly comes from AI applications designed around the business, grounded in governed data, and operationalised end to end.

Q6: How are AI applications, including AI agents, playing out across key verticals? What advice would you give to enterprise leaders in these sectors?

A: Whether you lead in finance, pharma, media, CPG, or tech, the questions are converging: how do we use AI to improve business productivity? How do we balance industry regulation with AI innovation? How do we control costs without slowing adoption? The leaders who solve these challenges today will build faster, more resilient operations and gain a competitive edge.

In the public sector, AI is connecting data across agencies to reduce administrative burden and support decisions from benefits assessment to emergency response. Success depends on strong governance, clear lineage and transparency so outputs can be trusted and audited.

In marketing, AI applications are moving beyond content generation to orchestrating campaigns, analysing performance data and adapting system strategies in near real time. Data Intelligence for Marketing allows organisations to centralise customer and campaign data, apply AI to drive more accurate decisions, and automate tasks that scale human resources using AI agents.

In cybersecurity, multi-agent systems are proving effective to validate threats and accelerate response times while keeping humans in the loop. Databricks’ Data Intelligence for Cybersecurity powers scalable SecOps at scale with Agent Bricks by automating triage, enrichment, response and investigation, reducing alert fatigue and costs while boosting analyst productivity.

My advice for leaders is simple:

● Invest in your data and AI foundations with high-quality data and governance

● Have clear business ownership and outcomes you want AI to accomplish

● Scale what is already working.

What scaling AI reveals about governing personalisation

artificial intelligence 12 Feb 2026

By Mark Drasutis, Head of Value, APJ, Amplitude

As brands increasingly seek to understand and act on customer behavior, they need to continuously analyse user journeys, identify patterns and friction, and recommend or execute next steps in real time to deliver true personalisation. AI is accelerating this shift, redefining personalisation by moving brands beyond static journeys to experiences that adapt dynamically to customer behaviour.

Australia’s National AI Plan sends a clear message to marketing and product teams; AI can only scale if it is safe, transparent and responsibly governed. Yet, while AI capabilities are advancing rapidly toward greater autonomy, most organisational governance remains manual and fragmented.

With conversational AI and agentic AI becoming the primary interfaces for digital experiences, governance needs to operate at the same speed and complexity as the systems it oversees. Brands need capability uplift and accountability in equal measure or they risk falling behind.

The trust gap limiting AI-driven personalisation

AI-driven personalisation is being held back not by technology but by trust and transparency – a gap driven by weak governance, unclear accountability and a lack of workflows to manage AI safely. This matters because trust in AI remains fragile in Australia. A University of Melbourne-led study found that while half of Australians already use AI regularly, only one in three feel confident trusting it.

That trust gap is widening as personalisation evolves. Traditional rules based marketing, built on fixed segments, pre-defined journeys and manual triggers, is being replaced by real-time, generative personalisation where decisions are made continuously by AI. This shift demands new operating models, stronger governance frameworks and far greater visibility into how AI systems make decisions.

As agentic AI becomes more embedded in personalisation, teams are moving beyond static segmentation toward systems that can learn continuously from behaviour, test autonomously and adapt experiences in the moment. But even the most advanced systems will fail if customers don’t trust the intelligence behind them.

Australia’s National AI Plan reinforces that trust and transparency are not optional – they are the foundation for safe, scalable AI-driven personalisation. Done well, brands can deliver meaningful, adaptive experiences without compromising privacy, fairness or customer confidence.

AI governance needs to be built in, not bolted on

As AI takes on a bigger role in shaping personalised customer experiences, the governance behind those systems becomes just as important as the technology itself. The rise of employees using AI tools independently outside formal approval channels creates security and compliance risks. Organisations cannot rely on ad hoc controls anymore – they need transparent systems that formalise how AI is accessed, monitored and governed so teams can innovate without losing control. Boards and executives are accountable for AI strategy, governance and ethical application, emphasising that oversight must be enterprise grade, not experimental.

Effective guardrails start with visibility. As AI drives personalised decisions, brands need full clarity on how those decisions are being made. Brands need to trace which data an AI model uses to make a decision, understand the prompts, models and parameters behind an output and maintain clear logs that show how AI shapes the paths customers take and the outcomes they experience. Without transparency, it becomes impossible to spot bias, drift or unintended behaviour.

What matters in practice is real time visibility. When teams can see how AI driven decisions influence user behaviour, conversion and retention, they can assess whether those decisions are delivering value or creating unintended consequences. This kind of visibility is what allows personalisation to move from experimentation to something dependable.

Some early adopters are already putting this into practice. ZIP, an Australian fintech company, is already using AI agents on Amplitude’s MCP server to embed their domain knowledge directly into their LLM workflows, improving how personalised journeys are monitored and optimised. The result of this was a 60% increase in customers starting an additional repayment flow and the removal of more than 4,000 days of navigation friction.

This visibility makes it possible to intervene early, course correct when required and prevent minor issues from scaling into larger problems. For marketing and product teams, this means AI driven personalisation becomes safer, more predictable and more aligned with actual customer behaviour. AI governance cannot be patched on later. It must be embedded into the core of decisioning systems so AI operates safely, predictably and in line with both regulation and customer expectations.

Invest in continuous oversight for continuous experimentation

Echoed in the National AI Plan, real time personalisation means AI is constantly adapting, which requires continuous oversight rather than periodic manual checks.

When AI underpins the customer experience, these risks compound quickly. Automation without continuous oversight risks locking incorrect decisions at scale. Continuous oversight is what ensures experimentation remains safe, explainable and aligned with customer expectations on personalisation.

AI Agents are most effective when they work alongside humans, not in place of them. They can monitor customer behaviour, surface opportunities and support controlled experimentation at speed, while humans can remain responsible for setting strategy, defining guardrails and approving customer facing changes. A leading Australian bank currently using Amplitude’s AI Agents has advanced their data-driven experimentation, allowing them to uncover key customer behavioural patterns and traffic shifts with central human oversight. Autonomy can be adjusted over time as confidence grows, but accountability remains firmly with people.

This in-loop model ensures personalised experiences adapt based on real customer behaviour, while still reflecting brand intent, fairness standards and evolving privacy expectations. Products can optimise continuously, but only within approved parameters, keeping customer experience safety and performance aligned.

AI has the potential to fundamentally reshape personalisation, but only when trust, transparency, and governance scale alongside the technology. Without them, AI accelerates risk and limits growth. With them, it becomes a powerful and defensible competitive advantage.

The brands that succeed won’t be those that deploy the most AI, but those that govern it with intent and discipline. Now is the time to move beyond experimentation - strengthening oversight, embedding clear governance and building transparent data foundations that allow AI to scale safely and deliver personalised experiences customers genuinely trust.

How Mundial Media Uses AI to Decode Cultural Context

artificial intelligence 11 Feb 2026

Tony, there's a lot of talk about multicultural audiences being "important." Can you explain?

Multicultural audiences are no longer a segment; they’re the primary drivers of U.S. economic growth. Multicultural consumers are fueling most of the country's buying power. But reaching this deeply nuanced, diverse audience in a privacy-first ad technology environment has never been more difficult. Mainstream ad platforms weren’t built for this.

You've been vocal about mainstream ad platforms becoming "too automated." What's the problem with automation?

Automation is powerful for handling large volumes, but it falls short when it ignores cultural layers. Culture shapes everything from how people interpret signals to what motivates them. For instance, a Puerto Rican millennial in New York and a Mexican American Gen Z in Texas could show similar online patterns, yet their cultural influences create distinct needs. That's why tools like Mundial Media’s proprietary Cadmus AI technology are designed to decode those deeper contexts.

How does Mundial Media achieve that precision at scale?

It starts with processing hundreds of millions of signals daily and pinpointing where audience interests and cultural shifts overlap. This enables us to effectively reach over 50 million users, balancing broad scale with targeted accuracy.

Privacy regulations are tightening, and third-party cookies are disappearing. How is Mundial Media navigating this shift?

We've long prioritized first-party data and contextual cues over invasive tracking. Cadmus AI, trained on over three years of compounded AI learnings, delivers precise, real-time cultural understanding, privacy-safe scale, and high-performing contextual targeting, the “right ad at the right moment” without outdated cookies, IDs, or legacy identity signals.

Mundial Media emphasizes that your team embodies the diversity of the audiences you serve. Why does "lived experience" matter in the technical world of ad tech?

Technical tools alone can't capture bias and subtleties; that's where personal insights come in. Our diverse team brings an innate grasp of what makes messaging authentic, spotting resonant visuals, and avoiding stereotypes. This human element sharpens AI's effectiveness beyond raw data analysis.

You mentioned Cadmus AI has been trained on "over three years of compounded learnings." What does that continuous training look like?

It's an ongoing cycle where each campaign refines the system. Over time, this builds a smarter model for predicting what engages various segments and when to deliver messages for maximum relevance.

What does delivering "the right ad at the right moment" mean in a culturally nuanced context?

Delivering 'the right ad at the right moment' in a culturally nuanced context is about relevance rooted in understanding. It means knowing why a moment matters, who it matters to, and how a brand can show up in a way that feels natural and aligned with the audience's mindset.

With Cadmus AI, we know when brands want to target NFL football versus global football or soccer, and when Beyoncé has a major moment, it's a moment your brand should be part of. It's using cultural insight to match a message with the emotional and social context people are in at that exact moment, so the brand feels relevant to what they actually care about right then.

Can you give an example of how Mundial Media can help brands capitalize on major cultural moments?

The 2026 FIFA World Cup is the perfect example. We're talking about 6 billion viewers worldwide, over 29 million multicultural fans in the U.S. alone. This is arguably the decade's biggest multicultural marketing moment. The opportunity here goes beyond traditional sponsorship. What actually works is showing up authentically. Cadmus AI helps brands understand when and how to participate in ways that honor what these moments actually mean to different countries. Those are real emotional connections – hometown pride. Brands that respect that earn trust, and trust drives everything else.

What's the biggest misconception brands have about reaching multicultural audiences?

Many view it as a simple add-on, such as translating content or ticking diversity boxes, while seeing these groups as peripheral. In truth, they're central to modern culture, large consumer spending, innovating trends and adopting early, making them essential for any brand eyeing long-term growth.

Looking ahead, how do you see AI and cultural understanding evolving in advertising?

With AI democratizing data processing, the edge will come from embedding cultural depth to handle nuance and authenticity. We're advancing both tech and expertise to merge these, creating systems that target precisely while respecting human contexts in an increasingly complex landscape.

How Marketing Agencies Can Protect Client Data in an Era of AI-Powered Threats

artificial intelligence 11 Feb 2026

Marketing agencies are uniquely positioned as custodians of client data across dozens of platforms. How has this role evolved in terms of security responsibility, and why is 2026 a critical year for agencies to address this?

Marketing agencies have fundamentally transformed from service providers into data custodians, often holding the keys to their clients' most valuable digital assets. A typical agency today manages credentials for 50+ client accounts across advertising platforms, analytics tools, social media, CRMs, and content management systems. Each login represents a potential entry point not just to the agency's infrastructure, but directly into client operations.

2026 marks a critical inflection point for three reasons. First, AI-powered attacks have made credential harvesting exponentially more sophisticated; attackers can now analyze user behavior patterns and craft targeted phishing campaigns that are nearly indistinguishable from legitimate communications. Second, regulatory frameworks around data protection are tightening globally, with agencies increasingly held liable for breaches originating from their access points. Third, clients are becoming more security-conscious in their vendor selection process. We're seeing RFPs that explicitly require agencies to demonstrate robust security protocols, including how they manage shared credentials. Agencies that can't articulate their security posture are losing contracts to competitors who can.

How can agencies transform their security practices from a checkbox requirement into an actual competitive advantage during pitches and contract renewals?

The agencies that win in 2026 are those positioning security as a core competency, not an afterthought. During pitches, leading agencies now include dedicated sections on their security infrastructure, demonstrating their zero-knowledge password management system, showing how they can onboard and offboard team members to client accounts in minutes rather than days, and explaining their audit trail capabilities.

The competitive advantage comes from trust. When an agency can tell a prospective client, "We use enterprise-grade password management with military-grade AES-256 encryption, and no one, not even our leadership, can access your credentials without proper authorization," that's powerful differentiation. We're working with agencies that have made their security protocol a key selling point in proposals. It demonstrates professionalism and shows they take their custodian role seriously. In an industry where one breach can destroy years of client relationships, that message resonates.

AI-powered phishing attacks are becoming increasingly sophisticated. Can you describe what modern social engineering attacks targeting marketing agencies actually look like in 2026, and what makes agencies particularly vulnerable to these AI-driven threats compared to other industries?

Today's AI-powered attacks targeting agencies are remarkably sophisticated. We're seeing threat actors create fake emails that perfectly mimic client communication styles, analyzing previous email threads to replicate tone, terminology, and timing patterns. An account manager might receive what appears to be an urgent request from their client's CMO asking for immediate access to campaign data or credentials, using language and formatting that's virtually identical to legitimate requests.

Agencies are particularly vulnerable for several reasons. First, they operate in a high-velocity environment where urgent client requests are routine, and attackers exploit this culture of responsiveness. Second, agencies typically have multiple team members accessing the same client accounts, creating more potential entry points. Third, the creative nature of agency work means employees regularly click on links to review creative assets, making them more susceptible to malicious links disguised as client deliverables or campaign previews.

The most dangerous attacks we're seeing involve AI tools that harvest credentials while appearing to provide legitimate services. An employee might install what seems like a helpful SEO analysis tool or content optimization app, not realizing it's designed to capture login credentials and monitor user behavior.

Beyond technical solutions, what role does human awareness and training play in defending against these evolving threats?

Technology provides the foundation, but human awareness is your critical last line of defense. The most sophisticated password management system in the world can be undermined by an employee who falls for a convincing phishing email or shares credentials via an unsecured channel.

Effective training goes beyond annual compliance modules. Agencies need ongoing security awareness that addresses real-world scenarios; what does a credential harvesting attempt actually look like? How do you verify an urgent request is legitimate? What are the red flags in AI-generated phishing attempts? The key is making security awareness part of the agency culture, not just an IT department concern.

We also emphasize the importance of establishing clear protocols for credential sharing and verification. When someone requests access to a client account, what's the verification process? Training employees to pause and verify, even when requests seem urgent, can prevent the majority of social engineering attacks. It's about creating a security-conscious culture where asking "Can you verify this request through a secondary channel?" is encouraged, not viewed as slowing down work.

How should agencies think about credential management differently when they're not just protecting their own data, but serving as the gateway to client accounts across platforms?

Agencies need to shift from thinking about passwords as individual assets to viewing credential management as an enterprise-wide access control system. When you're managing keys to client kingdoms across dozens of platforms, you need infrastructure that provides visibility, control, and accountability.

This means implementing a zero-knowledge architecture where credentials are encrypted at the source and can only be decrypted by authorized users. It means having granular access controls so team members only access the specific client accounts relevant to their projects. It means maintaining detailed audit trails so you can track exactly who accessed which credentials and when, which is essential for both security and client trust.

The critical shift is moving from reactive to proactive management. Rather than manually hunting for passwords when someone needs access or scrambling to change credentials when someone leaves, you need systems that allow instant onboarding and one-click offboarding. When a client relationship ends or a team member transitions, you should be able to revoke access immediately without requiring manual password changes across multiple platforms. This isn't just about security; it's about operational efficiency and demonstrating to clients that their data is managed with enterprise-level rigor.

If you could recommend three immediate actions that agencies should take this quarter to strengthen their security posture, what would they be?

First, implement a business-grade password management solution immediately. This is your foundation; everything else builds from here. For less than $400 annually for a 20-person team, you eliminate the single biggest vulnerability in your security stack. Every day you continue managing client credentials through spreadsheets or browser-saved passwords is a day you're exposed to preventable breaches.

Second, conduct a Shadow IT audit. Require every team member to log every software tool and platform they're using into your password manager, sanctioned or otherwise. You cannot protect what you cannot see. This gives you a complete inventory of your software ecosystem and often reveals surprising security gaps where sensitive data is being stored in unapproved tools.

Third, establish and document your credential management protocols. Create clear written policies for how credentials are shared, how access is granted and revoked, and how urgent requests are verified. Make sure every team member understands these protocols and knows that following them isn't bureaucracy, it's protecting both the agency and your clients. Share these protocols with clients during onboarding and in annual reviews. It demonstrates professionalism and gives them confidence in your security practices.

For agencies that have historically viewed cybersecurity investments as cost centers, how should they reframe this thinking given the current threat landscape?

The calculation has fundamentally changed. A single credential breach can cost an agency a major client relationship, trigger regulatory penalties, and destroy years of reputation building. We've seen agencies lose six-figure accounts because they couldn't demonstrate adequate security controls. Conversely, agencies that position security as a strength are winning competitive pitches specifically because of their security infrastructure.

Consider the math: implementing enterprise-grade password management costs roughly $54 per user annually. Compare that to the cost of a single client breach: legal fees, notification requirements, lost business, reputation damage. Or consider the competitive advantage: if robust security protocols help you win just one additional mid-sized client per year, the ROI is exponential.

But beyond risk mitigation and competitive advantage, there's operational efficiency. How many hours does your team waste hunting for passwords, resetting forgotten credentials, or manually managing access when team members join or leave projects? Proper credential management eliminates this friction, making your team more productive and your operations more professional. This isn't a cost center, it's a revenue enabler and an efficiency multiplier.

Looking ahead through 2026, what emerging threats should agencies be preparing for now, even if they haven't fully materialized yet?

The intersection of AI and social engineering will become increasingly dangerous. We're already seeing early versions, but expect to see AI-powered attacks that can conduct real-time conversations, adapting their approach based on responses. Deepfake audio and video will make verification of urgent requests significantly more challenging. Imagine receiving a video call from a "client" requesting immediate credential access.

Watch for increased targeting of mobile devices. As remote work remains standard and team members access client accounts from personal devices, mobile endpoints become attractive targets. Agencies need to ensure their security infrastructure works seamlessly across devices without compromising security.

Finally, regulatory compliance will expand. More jurisdictions will implement data protection regulations that specifically address third-party access to client data. Agencies that can demonstrate compliance, showing encrypted credential management, detailed access logs, and clear data handling protocols, will have significant advantages in enterprise client relationships.

The agencies that thrive in 2026 won't be those that react to threats after they emerge, but those that build security into their operational DNA now. Password management as the first line of defense isn't just about protecting credentials, it's about demonstrating to clients that when they trust you with their digital assets, that trust is respected with enterprise-grade security at every level.

Redesigning Marketing Operations for the AI Era: Key Insights from Incubeta.

artificial intelligence 30 Jan 2026

How is AI changing the way marketing teams structure their creative and media workflows today?

AI is shifting workflows from linear handoffs to more connected, parallel processes. Instead of creative, media, and analytics operating in silos, teams increasingly work from a shared intelligence layer where insights, audience signals, and performance feedback flow continuously. At Incubeta, we see the biggest impact when AI accelerates iteration and personalization at scale, while strategic and creative decision-making remains firmly human-led.

What principles does Incubeta prioritize when helping brands redesign workflows around AI?

The first principle is that AI should augment human expertise, not replace it. We redesign workflows so AI handles speed, scale, and pattern recognition, especially in production and optimization, while people focus on strategy, creativity, and brand stewardship. The second principle is integration. AI delivers the most value when creative, media, and data systems operate as one connected workflow rather than separate layers.

Why is a human-centered approach still essential when applying AI across marketing operations?

AI is only as effective as the behaviors it’s designed to influence. A human-centered approach ensures AI-driven outputs reflect how people actually think, feel, and make decisions, rather than optimizing solely for short-term performance signals. At Incubeta, we use AI to support better human judgment and customer understanding, not to override them.

How do behavioral science frameworks like StoryVesting or the Bow Tie Funnel guide AI-driven marketing decisions?

Frameworks like StoryVesting and the Bow Tie Funnel give AI direction and purpose. They help ensure automation and personalization reinforce trust, relevance, and long-term value rather than simply increasing volume or efficiency. These frameworks also align internal teams around a shared customer logic, making AI-driven execution more consistent and easier to operationalize.

What does an AI-ready data workflow look like from Incubeta’s perspective?

An AI-ready data workflow is unified, accessible, and decision-oriented. It connects media, customer, and performance data into a single environment that supports real-time analysis and activation. At Incubeta, we approach this through a Data-as-a-Service mindset, where data is treated as a continuously available, governed layer that fuels planning, activation, attribution, and prediction. This allows teams to move from reporting what happened to anticipating what will happen next and acting with confidence.

How does AI improve attribution and predictive modeling in modern marketing organizations?

AI is fundamentally changing how attribution and predictive modeling support decision-making. Instead of forcing fragmented customer journeys into last-click or channel-based reports, AI-driven models account for multiple touchpoints, creative variables, and rapidly shifting behaviors to show what’s actually driving incremental impact.

Predictive modeling then builds on those signals to forecast outcomes, scenario-test media and creative investments, and evaluate trade-offs before decisions are made. As measurement systems become more advanced, marketers are moving away from trying to perfectly reconstruct a journey that no longer exists and instead using AI-driven modeling to plan what comes next with greater confidence, even as privacy constraints and signal loss accelerate.

The result is a move from reactive optimization to proactive, forward-looking planning, where reporting becomes a decision engine rather than a justification exercise.

What role do platforms like Google Marketing Platform and Google Cloud play in enabling AI-powered decision-making?

Google Marketing Platform and Google Cloud provide the infrastructure needed to connect data, activate insights, and scale AI responsibly. Together, they enable advanced analytics, modeling, and automation while maintaining governance and transparency. Incubeta works closely within these ecosystems to help brands operationalize AI in ways that support both performance and accountability.

How is AI reshaping collaboration between creative, media, and analytics teams?

AI creates a shared language between teams by grounding decisions in common data and insights. Creative teams gain faster feedback, media teams gain clearer signals, and analytics teams can focus on higher-value modeling instead of manual reporting. The result is more cohesive collaboration and fewer disconnects between strategy, execution, and measurement.

What practical steps can marketing leaders take to govern AI usage across their organizations?

Effective AI governance is less about restriction and more about clarity. Marketing leaders need to define where AI is appropriate in the workflow, where human judgment is required, and how outputs are reviewed before activation. At Incubeta, we see the most progress when governance is built directly into everyday processes, so AI use feels intentional and repeatable rather than experimental or risky.

What signals or outcomes help demonstrate AI’s impact to executive leadership?

Executives respond best to outcomes tied to efficiency, effectiveness, and decision quality. This includes faster time to market, improved personalization at scale, and clearer links between marketing activity and business results. Framing AI as an operational and strategic advantage, rather than a standalone tool, helps make its value tangible to the C-suite.

Are there any exciting developments on the horizon at Incubeta in 2026?

As we kick off 2026, the excitement at Incubeta is palpable. One of the standout moments I’m particularly looking forward to is the launch of our new podcast, Digital Edge in Q1. This podcast will bring together a dynamic range of voices, offering diverse perspectives from across industries on key topics like the future of AI, marketing effectiveness, and much more.

I’m honored to be a guest on an upcoming episode, where I’ll dive into AI architecture and share how organizations can set themselves up for success with AI. If you’re eager to gain actionable insights and hear from industry leaders on how they’re driving innovation in marketing and advertising, make sure to tune in!

AI Agents & Reinforcement Learning: The Future of Customer Engagement | Jojo Zieff, Braze

artificial intelligence 8 Sep 2025

1. What advantages does reinforcement learning offer over traditional A/B testing or rules-based personalization models?

Traditional A/B testing remains a valuable tool for marketers—it allows for quick experimentation and helps identify which version of a message or experience performs best. But its scope is limited to testing a limited number of fixed variants in isolation.

Reinforcement learning (RL) transforms static personalization to true relevance, facilitating customer experience at the individual level. Instead of relying on static tests or rules-based systems, RL continuously learns from real-time customer behavior and adapts engagement strategies across multiple dimensions. This allows brands to optimize billions of decision points across the full customer journey and delivers increasingly relevant, 1:1 experiences at scale.

More than just enhancing personalization, reinforcement learning helps marketers drive meaningful outcomes by aligning individual experiences with their most impactful business goals. It helps marketers create a deeply relevant experience for customers, while optimizing any marketer-defined goals.

2. What kinds of behavioral or contextual data will be used to power more intelligent message optimization within your journeys?

For many marketers, the challenge isn’t a lack of data—it’s making sense of it. Vast amounts of static data are of little value if they don’t translate into meaningful insights that can turn into action. And the complexity grows when trying to personalize and optimize experiences at scale across countless customers and touchpoints throughout the lifecycle.

This is where AI is a game changer. By leveraging behavioral and contextual data, such as a unique user's loyalty and interaction history, to help uncover insights that are not only actionable but also highly relevant to each individual. And with the rise of AI agents, we’re entering a new era where decisions about how and when to engage can be made intelligently and automatically—taking personalization efforts to the next level and delivering true business impact at scale.

3. In what ways will marketers retain creative control while letting AI automate experimentation and optimization?

Investment in generative AI assistants has empowered creative professionals and marketers to work more efficiently and collaboratively with AI. These tools have helped eliminate tedious tasks and bottlenecks in their process—freeing teams to focus on higher-impact work like strategy and creativity.

Now, with the rise of AI agents—systems that perceive their environment, make autonomous decisions, and take action to achieve specific goals—marketers can take creativity to the next level. These agents can run millions of simultaneous tests on creative messages, optimizing every dimension to support the most relevant experience for each individual, all at massive scale.

AI agents extend the capabilities of marketing teams by helping determine which creative components resonate most with each customer, while making sure we maintain the optimal levels of control. By putting guardrails in place, such as defining which channels or parts of the experience to optimize, and pairing agents with expert AI services that continuously fine-tune their decisions, marketers can maintain alignment with brand goals.

This balance allows marketers to stay focused on creativity and strategy, while AI dynamically experiments and personalizes content at the 1:1 level—turning great ideas into truly relevant experiences.

4. How do you see the role of AI agents evolving within customer engagement platforms over the next 2–3 years?

AI agents are evolving from helpful assistants to autonomous decision-makers that will fundamentally change how marketers operate. In the future, working with agents will feel less like working with a tool, and more like working with a team of specialists: a brand strategist, copywriter, developer, data analyst and more—all ready to amplify relevant customer experiences. They will also help marketers derive insights and experiment with data at an unprecedented scale, and expand personalized experiences across millions of touchpoints.

The evolution extends beyond reactive optimization to predictive engagement, where agents anticipate customer needs before they're expressed. This shift enables AI to handle tactical execution while marketers focus on strategy, creativity, and relationship building. The objective isn't increasing message volume, but helping marketers be more strategic and relevant about when and how they reach customers.

This shift will elevate the marketer’s role to that of a strategic conductor, guiding AI to achieve business outcomes rather than executing manual tasks.

5. What impact should enterprise customers expect on KPIs like engagement rate, retention, and CLV from this enhanced AI decisioning?

When every customer interaction is truly personalized, brands unlock reciprocal value. As AI continuously learns and adapts, it can orchestrate the experiences that are deeply relevant for each customer across touchpoints. This level of precision deepens relationships, strengthens loyalty, and positions your brand as an essential part of a customer lifecycle.

With the flexibility of AI decisioning, marketers can optimize for virtually any business goal—whether it’s increasing top-line revenue, boosting customer lifetime value, or driving more loyalty sign-ups.With Braze’s recent acquisition of Offerfit, Braze’s AI agents are already supporting millions of decisions every day—and the impact doesn’t stop there. AI agents can adapt to support whatever metric matters most to your brand, helping you move faster and smarter across channels and touchpoints.

6. How will OfferFit’s reinforcement learning capabilities reshape how you approach cross-channel customer engagement?

To resonate with consumers across both traditional and emerging channels, it’s no longer just about finding the right message, for the right channel, in the right moment—it’s finding the most relevant, end-to-end experience: the right copy and creative, combination of messages, the right sequencing of channels, and the right moments to send each message across the customer’s journey. We see the capabilities of reinforcement learning representing a fundamental shift within Customer Engagement. The successful deployment of machine-learning-driven and reinforcement-learning optimization is key to helping marketers achieve relevance at scale across the many different dimensions of a customer's experience.

Cross-channel engagement becomes truly orchestrated rather than simply coordinated—the AI determines not only message content but also optimal channel selection, financial offers, engagement timing, and more. Each interaction teaches the system something new about that specific customer, creating a feedback loop that becomes more effective over time, and delivers more relevant experiences for customers.

We are excited by OfferFit’s capabilities and how they will shape our approach for customer engagement. OfferFit AI agents make 6.4B agent decisions per day. Millions of end users are getting 1:1 personalized decisions a day - meaning marketers can orchestrate more deeply relevant experiences for their customers, at scale.

Get in touch with our MarTech Experts.

artificial intelligence

Reinventing the AI Supply Chain: Inside JFrog and NVIDIA’s trust layer for AI Agents

AI’s Double-Edged Sword: Countering AI-Enabled Cyberattacks by Deploying Defensive AI Strategies

Why longevity and adaptability after deploying agentic AI will define enterprise success in 2026

What scaling AI reveals about governing personalisation

How Mundial Media Uses AI to Decode Cultural Context

How Marketing Agencies Can Protect Client Data in an Era of AI-Powered Threats

Redesigning Marketing Operations for the AI Era: Key Insights from Incubeta.

AI Agents & Reinforcement Learning: The Future of Customer Engagement | Jojo Zieff, Braze

Most Recent

How to Build a Post-Sale Support System That Scales With Your Customers

Gaming Solved App Monetization From Day One. Why Is the Rest of the App Economy Still Playing Catch-Up?

The Security Threat Your AI Strategy Didn’t Account For.

From Fragmented Martech Stacks to Unified Data Platforms as a foundation for AI

AI Made PR and Marketing Work Faster. But It Didn’t Fix Your Biggest Inefficiency.

Reinventing the AI Supply Chain: Inside JFrog and NVIDIA’s trust layer for AI Agents

Our Other Publications

Join our newsletter!