NXT1 Daily Tech Briefing

Wednesday, June 17, 2026

CTO topics, SaaS and platform markets, AI security, agentic AI & MCP, government AI policy, and deep technical research.

CTO Topics

Agent Gravity

Tomasz Tunguz · May 2026
Market
AI infrastructure strategy / agent platform competitive dynamics
Trend
Tunguz argues platforms will compete to retain AI agents and their compute the way cloud platforms once competed for data, dubbing the dynamic "agent gravity" — once an agent's context, credentials, and workflows are embedded in a platform, switching costs lock it in much like the data-gravity dynamics of the last decade.
Tech Highlight
Maps the mechanism directly onto Dave McCrory's original "data gravity" thesis: as an agent accumulates memory, tool integrations, and workflow history on a given platform, the cost of migrating it elsewhere rises non-linearly, turning agent retention into a new infrastructure moat.
6-Month Outlook
Expect platform vendors to start marketing agent-portability (or lack thereof) as a competitive feature. Watch for analyst firms adopting "agent gravity" as shorthand alongside "data gravity" in platform-lock-in research.

What Microsoft's New Research Tells CFOs About the ROI of AI

Fortune · May 11, 2026
Market
Enterprise AI ROI measurement / CFO-level AI investment strategy
Trend
New Microsoft research — a 20,000-person, 10-country survey paired with a 14-company Harvard "Frontier Firm" cohort — finds organizational factors account for 67% of AI's impact on outcomes versus 32% for individual mindset, meaning how a company restructures work matters roughly twice as much as employee attitude.
Tech Highlight
Drawing on Microsoft 365 telemetry, the research finds 66% of users report more time for high-value work and 58% report producing previously-impossible output, but only 26% say leadership is clearly aligned on AI strategy and just 13% say they're rewarded for reinventing work with AI absent immediate results — exposing the incentive gap behind stalled ROI.
6-Month Outlook
Watch for CFOs starting to tie AI budget approval to organizational-readiness metrics (leadership alignment, incentive redesign) rather than tool-adoption counts alone, as this data gives them a benchmark to cite.

SaaS and Platform Tech Markets

This Week in SaaS: June 9 – 15, 2026

SaaSrise · June 2026
Market
SaaS funding and M&A news roundup / weekly market pulse
Trend
Weekly roundup covering a dense week of SaaS capital activity, including OpenAI's acquisition of developer platform Gitpod/Ona and Blockworks' acquisition of crypto-data firm Messari, alongside a wave of fresh funding rounds across infrastructure and vertical SaaS.
Tech Highlight
Aggregates deal terms and strategic rationale across acquirers spanning AI labs (OpenAI) and media/data platforms (Blockworks), illustrating how acquisition appetite is broadening beyond traditional SaaS-on-SaaS consolidation into adjacent data and developer-tooling assets.
6-Month Outlook
Watch for continued cross-category acquisitions (AI labs buying dev tooling, data platforms buying analytics) as a sign that M&A boundaries between "AI company" and "SaaS company" keep blurring.

NinjaOne Raises Series C Extension at $12.3 Billion Valuation

NinjaOne · June 9, 2026
Market
IT/endpoint management SaaS / late-stage growth-equity funding
Trend
NinjaOne raised a Series C extension above $400M at a $12.3 billion valuation, with Wellington Management, TVG, and BDT & MSD Partners joining existing backers Sequoia, ICONIQ, Hedosophia, NEA, Washington Harbour, and CapitalG — one of the larger SaaS rounds disclosed this month.
Tech Highlight
The round comes with the company already profitable as of Q1 2026, debt-free, and growing roughly 70% year-over-year in 2025, with Gartner naming it a Leader in its 2026 Magic Quadrant for Endpoint Management Tools — a profitable-growth profile increasingly differentiating late-stage SaaS raises from cash-burning peers.
6-Month Outlook
Watch whether NinjaOne uses the capital for further M&A in the fragmented endpoint/RMM space, and whether other profitable, founder-led SaaS companies follow with similar late-stage rounds.

TensorWave Raises $350M Series B at $1.55B Valuation

BusinessWire · June 10, 2026
Market
AI cloud/GPU infrastructure-as-a-service / growth-stage venture funding
Trend
TensorWave raised a $350M Series B at a $1.55 billion valuation — roughly 3x its prior valuation — co-led by Magnetar Capital and AMD Ventures, with Maverick Silicon, Nexus Venture Partners, and Western Frontier also participating, marking the largest Series B in Nevada's history.
Tech Highlight
The capital funds further build-out of AMD Instinct MI355X GPU clusters for AI training and inference, pushing TensorWave's total funding since its 2023 founding to roughly $493 million as it competes for enterprise workloads against Nvidia-based cloud rivals.
6-Month Outlook
Watch for TensorWave cluster-capacity and customer disclosures as it scales MI355X deployments, and whether AMD Ventures' participation signals more AMD-aligned GPU-cloud funding rounds.

Genspark Extends Series B at $2.6B Valuation

Axios Pro · June 11, 2026
Market
Agentic workplace/AI-agent platforms / late-stage venture extension rounds
Trend
Genspark raised a $100M Series B extension at a $2.6 billion post-money valuation — a 63% jump in just three months — bringing its total Series B to $485M and total funding to over $645M, with Sozo Ventures, UpHonest Capital, and Mirae Asset participating.
Tech Highlight
The company reports more than 6,000 business customers for its agentic-workplace product, suggesting the rapid valuation step-up is being underwritten by enterprise adoption rather than speculative pre-revenue positioning.
6-Month Outlook
Watch for Genspark's next round (a full new Series C rather than an extension) as a signal of whether the 63% three-month markup holds, and for further customer-count disclosures.

Security + SaaS + DevSecOps + AI

FIRST Forecasts ~66,000 CVEs for 2026 as AI Reshapes Vulnerability Discovery

Help Net Security · June 15, 2026
Market
Vulnerability management / industry-wide CVE volume forecasting
Trend
FIRST.org forecasts roughly 66,000 CVEs will be published in 2026, with CEO Chris Gibson warning that AI-assisted vulnerability discovery — including Anthropic's Mythos and OpenAI's GPT-5.4-Cyber models — is shifting the field from a steady "rain" of disclosures to periodic "floods" that overwhelm triage capacity.
Tech Highlight
Cites Mozilla's Project Glasswing, which used AI-assisted fuzzing and analysis to fix 271 Firefox bugs, as proof that autonomous discovery tooling now finds vulnerabilities faster than human teams can verify and patch them — making human verification, not discovery, the new bottleneck.
6-Month Outlook
Watch whether 2026's actual CVE count tracks toward FIRST's 66,000 forecast, and for vendors publicly disclosing AI-discovery-driven patch batches similar to Glasswing's.

AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs

The Hacker News · June 6, 2026
Market
Autonomous vulnerability research / browser and open-source media-library security
Trend
Security startup depthfirst's autonomous AI agent uncovered 21 previously unknown zero-days in FFmpeg (CVE-2026-39210 through -39218) for roughly $1,000 in compute cost, some bugs as old as 23 years; separately, Chrome 149 patched a record 429 bugs, the worst a CVSS 9.6 ANGLE sandbox escape (CVE-2026-10881) that earned a $97,000 bounty.
Tech Highlight
The FFmpeg find demonstrates AI-agent fuzzing and code analysis reaching cost and coverage levels no human audit team could match against decades-old C codebases, while Google's bounty-program overhaul in April reflects the same AI-driven discovery volume now flooding even well-resourced vendor triage pipelines.
6-Month Outlook
Watch for more security startups publishing AI-agent-discovered CVE batches in legacy open-source codebases, and whether Google's revised bounty terms become a template other vendors adopt to manage AI-driven report volume.

Agentic AI & MCP Trends

Build Long-Running AI Agents That Pause, Resume, and Never Lose Context With ADK

Google Developers Blog · May 12, 2026
Market
Agent development frameworks / durable, long-running agent infrastructure
Trend
Google published an ADK (Agent Development Kit) tutorial showing how to build a "New Hire Onboarding Coordinator Agent" that can pause for days awaiting human input and resume exactly where it left off, addressing a core limitation of session-bound agent architectures.
Tech Highlight
Uses DatabaseSessionService for durable memory (SQLite or Cloud SQL), an explicit OnboardingStep state machine, and event-driven webhook resumption via state_delta — plus a delegated it_agent sub-agent for IT-specific steps — validated with golden eval tests simulating 48-hour idle gaps, then deployed to Agent Runtime with Cloud Trace observability.
6-Month Outlook
Watch for durable-session patterns like this becoming a standard ADK reference architecture, and for competing agent frameworks publishing comparable long-running pause/resume tutorials.

TikTok Launches MCP Server to Let AI Agents Run Campaigns

Digiday · May 13, 2026
Market
Ad-tech agentic tooling / social platform MCP adoption
Trend
TikTok announced an Ads MCP Server at TikTok World, letting AI agents plan, launch, and optimize ad campaigns directly, joining Google Ads, Meta, and Amazon in shipping platform-specific MCP servers for advertising.
Tech Highlight
Per TikTok's Jose Villalobos, the server exposes campaign-management functions as MCP tools so third-party agents can act on TikTok's ad platform without custom API integration work; Shirley Marschall frames data sovereignty — keeping campaign data and execution within TikTok's own infrastructure — as a key driver of platform-specific MCP servers.
6-Month Outlook
Watch for additional ad platforms (Pinterest, Snap, LinkedIn) shipping their own MCP servers, and for agencies disclosing performance data from agent-run versus human-run TikTok campaigns.

AI Impact on Government Policy (US & Global)

Colorado Legislature Again Amends Landmark AI Law

EPIC · May 14, 2026
Market
State AI regulation / automated decision-making technology (ADMT) governance
Trend
Colorado Gov. Jared Polis signed SB 26-189, repealing and replacing the 2024 Colorado AI Act — stripping out its duty-of-care, risk-management-program, impact-assessment, and AG-reporting requirements — and substituting a narrower ADMT framework with pre-use notice, post-adverse-outcome disclosure, and limited consumer rights, effective January 1, 2027.
Tech Highlight
The new framework gives Colorado's AG exclusive enforcement authority with no private right of action, and arrives as the DOJ has intervened in xAI's April 2026 First Amendment/Equal Protection lawsuit against the original CAIA — a suit SB 26-189 may now partly moot — while Polis simultaneously backs a proposed 10-year federal moratorium on state AI regulation opposed by 40 state attorneys general.
6-Month Outlook
Watch Colorado's AG rulemaking process ahead of the January 2027 effective date, and whether other states follow Colorado's retreat from duty-of-care AI frameworks toward narrower ADMT-style rules as the federal preemption fight continues.

Deep Technical & Research

Agentic Software: How AI Agents Are Restructuring the Software Paradigm

arXiv · June 4, 2026 (rev. June 10)
Market
Software engineering theory / agentic AI systems research
Trend
Zhenfeng Cao (Lingxi Intelligent Investment) formalizes "agentic software" as a distinct paradigm from traditional software: where conventional code carries pre-written decision logic, in agentic software the AI agent itself is the software, generating decision logic at runtime rather than executing fixed branches.
Tech Highlight
Reframes code's role as an instrumental, often-discardable resource the agent generates and consumes to accomplish a goal, rather than the durable artifact software engineering has historically been organized around — a definitional shift with implications for how agentic systems should be tested, versioned, and maintained.
6-Month Outlook
Watch for software-engineering conferences and standards bodies beginning to adopt "agentic software" terminology distinct from "AI-assisted coding," and for tooling vendors building around runtime-generated rather than pre-written decision logic.

Towards Trustworthy Agentic AI: A Comprehensive Survey of Safety, Robustness, Privacy, and System Security

arXiv · May 17, 2026
Market
AI safety and security research / agentic AI risk taxonomy
Trend
Researchers from the Chinese University of Hong Kong and Fudan University (Jinhu Qi, Muzhi Li, and collaborators) published a comprehensive survey mapping trustworthy-agentic-AI risks across two core dimensions — safety/robustness and privacy/system security — tied to specific stages of the agent workflow rather than treated as generic LLM concerns.
Tech Highlight
Highlights trade-offs the field hasn't resolved — richer agent memory improves task effectiveness but raises privacy exposure, while added safety guardrails can themselves introduce new failure modes — and flags that intermittent (rather than continuous) human oversight of agents raises open questions about accountability and auditability.
6-Month Outlook
Watch for stage-targeted mitigation frameworks like this one being adopted as reference taxonomies in enterprise agent-deployment risk assessments, and for follow-up work addressing the accountability gap from intermittent human oversight.